Câu 169: Isaca Certified Information Security Manager

Which of the following is MOST important for an information security manager to communicate to stakeholders when approving exceptions to the information security policy?

1. A. Impact on the risk profile — đáp án hiện tại
2. B. Need for compensating controls
3. C. Time period for review
4. D. Requirements for senior management reporting