An internal control audit has revealed a control deficiency related to a legacy system where the compensating controls no longer appear to be effective. Which of the following would BEST help the information security manager determine the security requirements to resolve the control deficiency?

Which of the following is the GREATEST benefit of a centralized approach to coordinating information security?

An organization has a process in place that involves the use of a vendor. A risk assessment was completed during the development of the process. A year after the implementation a monetary decision has been made to use a different vendor. What, if anything, should occur?

Which of the following will BEST facilitate the development of appropriate incident response procedures?

Conducting a cost-benefit analysis for a security investment is important because it