Due lo budget constraints, an internal IT application does not include the necessary controls to meet a client service level agreement (SLA). Which of the following is the information security manager's BEST course of action?

A risk assessment report shows that phishing attacks are an emerging threat for an organization that supports online financial services. Which of the following is the information security manager's BEST course of action?

Which of the following provides the BEST opportunity to evaluate the capabilities of incident response team members?

When implementing a new risk assessment methodology, which of the following is the MOST important requirement?

Which of the following is the MOST effective way for senior management to support the integration of information security governance into corporate governance?