A.Chief executive officer (CEO)

B.Chief operating officer (COO)

C.Chief information security officer (CISO)

D.Chief information officer (CIO)

A.Evaluating organizational security culture

B.Influencing human behavior

C.Defining risk accountability

D.Enforcing security policy

A.from denial of service (DoS) attacks.

B.on the client desktop.

C.in the server's database.

D.from eavesdropping.

A.Disaster recovery test results

B.Reciprocal agreements

C.Data retention requirements

D.Recovery time objectives (RTOs)

A.how often information security metrics are presented to senior management.

B.how well the information security program supports business objectives.

C.how often the information security steering committee reviews and updates security policies.

D.the percentage of corporate budget allocated to the information security program.