Câu 258: CISA: Certified Information Systems Auditor

Which of the following should be identified FIRST when assessing the maturity level of an organization’s vulnerability management practices?

1. A. Applicable IT governance framework
2. B. Key security team members to interview
3. C. Applicable security framework — đáp án hiện tại
4. D. Scope of vulnerability reports