Câu 40: EX0-115: IT Service Management Foundation based on ISO / IEC 20000

Which statement with regard to Information Security Management is true?

1. A. Information Security Management to specifically focus on managing Information Security effective within all information systems.
2. B. Management with appropriate authority shall approve an Information Security policy. — đáp án hiện tại
3. C. Security Incidents need to be reported and recorded immediately in line with the Problem Management procedure.
4. D. Security Incidents shall only be reported and recorded if they affect more than one user