Câu 179: Isaca Certified Information Security Manager

A newly appointed information security manager has been asked to update all security-related policies and procedures that have been static for five years or more. What is the BEST next step?

1. A. To gain an understanding of the current business direction — đáp án hiện tại
2. B. To update in accordance with the best business practices
3. C. To perform a risk assessment of the current IT environment
4. D. To assess corporate culture