Which is MOST important when contracting an external party to perform a penetration test?

Which of the following metrics BEST evaluates the completeness of disaster-recovery preparations?

For an enterprise implementing a bring your own device (BYOD) program, which of the following would provide the BEST security of corporate data residing on unsecured mobile devices?

What should be the information security manager s MOST important consideration when planning a disaster recovery test?

When introducing security measures into a software development life cycle, which of the following should be the FIRST step?