A risk owner has accepted a large amount of risk due to the high cost of controls. Which of the following should be the information security manager's PRIMARY focus in this situation?

Which of the following is MOST important to the successful management of an information security program?

Which of the following is the MOST effective way to protect the authenticity of data in transit?

What should a global information security manager do FIRST when informed that a new regulation with significant impact will go into effect soon?

A post-incident review identified that user error resulted in a major breach. Which of the following is MOST important to determine during the review?