A newly appointed information security manager has been asked to update all security-related policies and procedures that have been static for five years or more. What should be done NEXT?

Question

Babak Sadeghpour · Accepted Answer

Inventory and review current security policies.

Babak Sadeghpour · Answer

Gain an understanding of the current business direction.

Babak Sadeghpour · Answer

Perform a risk assessment of the current IT environment.

Babak Sadeghpour · Answer

Update in accordance with the best business practices.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 627 - CISM discussion

Suggested answer: C

0 comments