Which of the following is MOST important to follow when developing information security controls for an organization?

Question

Medard Vedasto · Accepted Answer

Use industry standard best practices for security controls in the organization.

Medard Vedasto · Answer

Exercise due diligence with regard to all risk management information to tailor appropriate controls.

Medard Vedasto · Answer

Perform a risk assessment and choose a standard that addresses existing gaps.

Medard Vedasto · Answer

Review all local and international standards and choose the most stringent based on location.

List of questions