Successful implementation of information security governance will FIRST require:

A.
security awareness training.

B.
updated security policies.

C.
a computer incident management team.

D.
a security architecture.

Explanation:

Updated security policies are required to align management objectives with security procedures;
management objectives translate into policy, policy translates into procedures. Security
procedures will necessitate specialized teams such as the computer incident response and
management group as well as specialized tools such as the security mechanisms that comprise
the security architecture. Security awareness will promote the policies, procedures and
appropriate use of the security mechanisms.