An information security manager has recently been notified of potential security risks associated with a third-party service provider. What should be done NEXT to address this concern?

Which of the following is the MOST important consideration when reporting the effectiveness of an information security program to key business stakeholders''

An information security manager is preparing an incident response plan. Which of the following is the MOST important consideration when responding to an incident involving sensitive customer data?

Which of the following is an information security manager's BEST course of action upon identification of a shadow IT application being used by a business unit?

A system administrator failed to report a security incident where the critical application server was not available to the business users. Which of the following is the BEST way to prevent a reoccurrence?