The BEST way to ensure that frequently encountered incidents are reflected in the user security awareness training program is to include:

Which type of plan is PRIMARILY intended to reduce the potential impact of security events that may occur?

Which of the following is MOST helpful in determining the realization of benefits from an information security program?

Senior management is concerned that the incident response team took unapproved actions during incident response that put business objectives at risk. Which of the following is the BEST way for the information security manager to respond to this situation?

Which of the following controls would BEST help to detect a targeted attack exploiting a zero-day vulnerability?