A recommended method to document the respective roles of groups and individuals for a given process is to:

Creating good security metrics is essential for a CISO. What would be the BEST sources for creating security metrics for baseline defenses coverage?

Which of the following represents the MOST negative impact resulting from an ineffective security governance program?

A Security Operations Centre (SOC) manager is informed that a database containing highly sensitive corporate strategy information is under attack. Information has been stolen and the database server was disconnected. Who must be informed of this incident?

Ensuring that the actions of a set of people, applications and systems follow the organization's rules is BEST described as: