A.Validating the reliability of information prior to dissemination

B.Ensuring timely incident information to internal stakeholders

C.Designating a communications representative

D.Responding immediately to questions from the public

A.Mature information security awareness training across the organization

B.Senior management approval of information security policies

C.Strict enforcement of employee compliance with organizational security policies

D.Security controls embedded within the development and operation of the IT environment

A.Ensuring antivirus has the latest definition files

B.Strengthening security patch implementation processes

C.Implementing a multi-layered security program

D.Disabling end-user computer peripheral access ports

A.The risk register

B.Baseline to industry standards

C.Balanced scorecard

D.Compliance requirements

A.Senior management support

B.Classification scheme

C.Business continuity plan (BCP)

D.Cost-benefit analysis