List of questions
Related questions
Question 561 - CISM discussion
Which of the following should be the PRIMARY basis for establishing metrics that measure the effectiveness of an information security program?
A.
Residual risk
B.
Regulatory requirements
C.
Risk tolerance
D.
Control objectives
Your answer:
0 comments
Sorted by
Leave a comment first