Câu 262: Isaca Certified Information Security Manager

Which of the following should be the PRIMARY basis for an information security strategy?

1. A. Audit and regulatory requirements
2. B. Information security policies
3. C. The organization's vision and mission — đáp án hiện tại
4. D. Results of a comprehensive gap analysis