A daily monitoring report reveals that an IT employee made a change to a firewall rule outside of the change control process. The information security manager's FIRST step in addressing the issue should be to:

Following a significant change to the underlying code of an application, it is MOST important for the information security manager to:

Using which of the following metrics will BEST help to determine the resiliency of IT infrastructure security controls?

Which of the following is the PRIMARY reason for an information security manager to present the business case for an information security initiative to senior management?

An incident management team leader sends out a notification that the organization has successfully recovered from a cyberattack. Which of the following should be done NEXT?