In risk assessment, after the identification of threats to organizational assets, the information security manager would:

An organization us& a particular encryption protocol for externally facing web pages and key financial services. A security firm publicizes a critical security flaw in the encryp manager do FIRST?

Which of the following is MOST helpful to developing a comprehensive Information security strategy?

An information security manager reads a media report of a new type of malware attack. Who should be notified FIRST"

What would be an information security manager's BEST course of action when notified that the implementation of some security controls is being delayed due to budget constraints?