Which of the following should be the FIRST step when performing triage of a malware incident?

A high-risk issue is discovered during an information security risk assessment of a legacy application. The business is unwilling to allocate the resources to remediate the issue. Which of the following would be the information security manager's BEST course of action?

Which of the following BEST validates that security controls are implemented in a new business process?

Which of the following components of an information security risk assessment is MOST valuable to senior management?

Which of the following should be the FIRST step in patch management procedures when receiving an emergency security patch?