Which of the following is the BEST way for an information security manager to justify ongoing annual maintenance fees associated with an intrusion prevention system (IPS)?

A CISO learns that a third-party service provider did not notify the organization of a data breach that affected the service provider's data center. Which of the following should the CISO do FIRST?

Which of the following should be the PRIMARY outcome of an information security program?

Which of the following is the MOST important factor of a successful information security program?

Which of the following is the MOST effective way for an organization to ensure its third-party service providers are aware of information security requirements and expectations?