List of questions
Related questions
Question 150 - IIA-CIA-Part1 discussion
A new company's risk management function is developing its cybersecurity risk management program Which of the following actions should be the first priority when developing the program?
A.
Start building a cybersecurity culture and set the desired behavior using a bottom-up approach
B.
Determine the cybersecurity framework that will establish and report on the effectiveness of the program
C.
Define the cybersecurity risk appetite and perform a cost-benefit analysis of the program
D.
Raise cybersecurity awareness across various departments outside of the IT department
Your answer:
0 comments
Sorted by
Leave a comment first