Labeling information according to its security classification:

In addition to business alignment and security ownership, which of the following is MOST critical for information security governance?

Which of the following is an information security manager's BEST course of action to address a significant materialized risk that was not prevented by organizational controls?

An organization that has outsourced its incident management capabilities just discovered a significant privacy breach by an unknown attacker. Which of the following is the important action of the information security manager?

Which of the following would be the BEST way for a company to reduce the risk of data loss resulting from employee-owned devices accessing the corporate email system?