A.The incident response plan is documented and tested regularly.

B.Information security policies are readily available to employees.

C.Information security steering committee meetings are held regularly.

D.Employees attend annual organization-wide security training.

A.Details from intrusion detection system (IDS) logs

B.Method of operation used by the attacker

C.Location of the attacker

D.Cost of the attack to the organization

A.when system requirements are defined.

B.during the system design phase.

C.as part of application development.

D.as part of prototyping.

A.Reviewing data backups and restoration

B.Reviewing system utilization logs

C.Maintaining logs of privileged users

D.Managing user provisioning and access control

A.the resources used for information security projects are kept to a minimum.

B.funding is approved for requested information security projects.

C.periodic information security audits are conducted.

D.information security is treated as a business critical issue.