Which of the following is an information security manager's BEST course of action when a threat intelligence report indicates a large number of ransomware attacks targeting the industry?

Who is BEST suited to determine how the information in a database should be classified?

Which is the BEST method to evaluate the effectiveness of an alternate processing site when continuous uptime is required?

Reevaluation of risk is MOST critical when there is:

What should be an information security manager's MOST important consideration when developing a multi-year plan?