A.Approved Information security strategy

B.Documented information security policies

C.Comprehensive information security awareness program

D.Appropriate information security metrics

A.website transactions and taxation.

B.lack of competition and free trade.

C.encryption tools and personal data.

D.software patches and corporate data.

A.Developing information security polices

B.Establishing an information security governance committee

C.Establishing a security awareness program

D.Providing funding for information security efforts

A.reduces the need to identify baseline controls for each classification.

B.affects the consequences if information is handled insecurely.

C.enhances the likelihood of people handling information securely.

D.reduces the number and type of countermeasures required.

A.identify change m security exposures.

B.minimize loss from security incidents.

C.meet regulatory compliance requirements.

D.reduce risk management costs