Câu 150: CISSP: Certified Information Systems Security Professional

Which of the following is considered the FIRST step when designing an internal security control assessment?

1. A. Create a plan based on comprehensive knowledge of known breaches.
2. B. Create a plan based on reconnaissance of the organization's infrastructure.
3. C. Create a plan based on a recognized framework of known controls. — đáp án hiện tại
4. D. Create a plan based on recent vulnerability scans of the systems in question.