Management would like to understand the risk associated with engaging an Infrastructure-as-a- Service (IaaS) provider compared to hosting internally. Which of the following would provide the BEST method of comparing risk scenarios?

An organization is creating a risk mitigation plan that considers redundant power supplies to reduce the business risk associated with critical system outages. Which type of control is being considered?

An employee clicked on a malicious link in an email that resulted in compromising company data.
What is the BEST way to mitigate this risk in the future?

An information security manager is assisting in the development of the request for proposal (RFP) for a new outsourced service. This will require the third party to have access to critical business information. The security manager should focus PRIMARILY on defining:

To address the issue that performance pressures on IT may conflict with information security controls, it is MOST important that: