What should be an information security manager's MOST important consideration when reviewing a proposed upgrade to a business unit's production database?

A security policy exception is leading to an unexpected increase in the number of alerts about suspicious Internet traffic on an organization's network. Which of the following is the BEST course of action?

Which of the following should an organization do FIRST when confronted with the transfer of personal data across borders?

Which of the following should be an information security managers PRIMARY focus during the development of a critical system storing highly confidential data?

Which of the following is MOST appropriate to communicate to senior management regarding information risk?