Which of the following is the MOST important detail to capture in an organization's risk register?

An organization is conducting a post-incident review to determine the root cause of an information security incident. Which of the following situations would be MOST harmful to this investigation?

Which of the following BEST enables an organization to determine what activities and changes have occurred on a system during a cybersecurity incident?

Penetration testing is MOST appropriate when a:

Which of the following is MOST important to have in place for an organization's information security program to be effective?