Câu 84: CISA: Certified Information Systems Auditor

Which of the following represents the HIGHEST level of maturity of an information security program?

1. A. The program meets regulatory and compliance requirements.
2. B. Information security policies and procedures are established.
3. C. A framework is in place to measure risks and track effectiveness. — đáp án hiện tại
4. D. A training program is in place to promote information security awareness.