An information security manager needs to ensure security testing is conducted on a new system. Which of the following would provide the HIGHEST level of assurance?

Several significant risks have been identified after a centralized risk register was compiled and prioritized. The information security manager's MOST important action is to:

Which of the following should an information security manager do FIRST to address complaints that a newly implemented security control has slowed business operations?

An organization s HR department would like to outsource its employee management system to a cloud-hosted solution due to features and cost savings offered. Management has identified this solution as a business need and wants to move forward. What should be the PRIMARY role of information security in this effort?

Which of the following is the MAIN objective of a risk management program?