When the inherent risk of a business activity is lower than the acceptable risk level, the BEST course of action would be to:

The MOST effective way to determine the resources required by internal Incident response teams is to

An information security manager developing an incident response plan MUST ensure it includes:

An organization's information security manager has learned that similar organizations have become increasingly susceptible to spear phishing attacks. What is the BEST way to address this concern?

What should be the PRIMARY basis for establishing a recovery time objective (RTO) for a critical business application?