A.Centralized controls for incident handling

B.The ability to review and monitor data streams by network segment

C.The ability to shut down or block suspicious connections

D.Increased visibility into user web surfing

A.Business strategy

B.Data classification

C.Information security strategy

D.Regulatory requirements

A.Data custodian

B.Security policy author

C.Information security manager

D.Creator of the document

A.utilize existing governance structures when possible.

B.ensure changes are consistent with existing standards.

C.make gradual changes to governance to minimize employee resistance.

D.implement processes consistent with international standards.

A.Security budget

B.Number of employees

C.Outsourced processes

D.Corporate culture