Câu 333: Isaca Certified Information Security Manager

An organization has purchased an Internet sales company to extend the sales department. The information security manager's FIRST step to ensure the security policy framework encompasses the new business model is to:

1. A. perform a gap analysis. — đáp án hiện tại
2. B. implement both companies' policies separately.
3. C. merge both companies' policies.
4. D. perform a vulnerability assessment.