Câu 71: CISSP: Certified Information Systems Security Professional

Which of the following is MOST important to follow when developing information security controls for an organization?

1. A. Use industry standard best practices for security controls in the organization.
2. B. Exercise due diligence with regard to all risk management information to tailor appropriate controls. — đáp án hiện tại
3. C. Review all local and international standards and choose the most stringent based on location.
4. D. Perform a risk assessment and choose a standard that addresses existing gaps.