Câu 281: Isaca Certified Information Security Manager

An information security manager discovers that the organization's new information security policy is not being followed across all departments. Which of the following should be of GREATEST concern to the information security manager?

1. A. Business unit management has not emphasized the importance of the new policy.
2. B. Different communication methods may be required for each business unit.
3. C. The wording of the policy is not tailored to the audience.
4. D. The corresponding controls are viewed as prohibitive to business operations. — đáp án hiện tại