A.Screening prospective employees

B.Well-designed firewall system

C.Well-designed intrusion detection system (IDS)

D.Biometric security access control

A.Risk response scenarios

B.Security procedures

C.Incident notification plan

D.Disaster recovery plan (DRP)

A.The incident response team has the appropriate training

B.An incident response maturity assessment has been conducted

C.Management support and approval has been obtained

D.A reputable managed security services provider has been engaged

A.security program priorities to achieve an accepted risk level

B.level of compliance with internal policy

C.assessed level of security risk at a particular point in time

D.current and target security state for the business

A.Verifying security during the testing process

B.Conducting penetration testing post implementation

C.Integrating security controls in each phase of the life cycle

D.Having a well-defined change process