Which of the following should an information security manager do FIRST when a mandatory security standard hinders the achievement of an identified business objective?

Question

Echo Wind · Accepted Answer

Escalate to senior management.

Echo Wind · Answer

Revisit the business objective.

Echo Wind · Answer

Perform a cost-benefit analysis.

Echo Wind · Answer

Recommend risk acceptance.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 258 - CISM discussion

Suggested answer: B

0 comments