Which of the following control type is the FIRST consideration for aligning employee behavior with an organization's information security objectives?

A recent audit has identified that security controls required by the organization's policies have not been implemented for a particular application. What should the information security manager do NEXT to address this issue?

From a business perspective the MOST important function of information security is to support:

What should be an information security manager's NEXT activity following the remediation of a security incident?

Which of the following is BEST performed by the security department?