A.Logical access controls

B.Version control

C.Change management controls

D.A patch management process

A.Obtain assistance from IT to implement automated security cantrals.

B.Include information security requirements in the change control process.

C.Focus on addressing conflicts between security and performance.

D.Collaborate with business and IT functions in determining controls.

A.previous training sessions.

B.examples of help desk requests.

C.results of exit interviews.

D.responses to security questionnaires.

A.The board is regularly informed of information security key performance indicators (KPIs),

B.The information security steering committee is composed of business leaders.

C.The information security team is aware of business goals.

D.A cost-benefit analysis is conducted on all information security initiatives.

A.Documentation of regulatory reporting requirements

B.A review of the forensics chain of custom

C.Evaluations of the adequacy of existing controls

D.An evaluation of the effectiveness of the information security strategy