Which of the following should be the FIRST course of action when it becomes apparent that the recovery time objective (RTO) will not be met during incident response

Which of the following BEST supports information security management in the event of organizational changes in security personnel?

Which of the following is the PRIMARY responsibility of the information security steering committee?

Which of the following would be MOST helpful in gaining support for a business case for an information security initiative?

Management has expressed concern that they are not kept fully informed of key information security risks associated with the organization.
Which of the following should be done FIRST to address this concern?