When developing an information security program, what is the MOST useful source of information
for determining available resources?

A.
Proficiency test

B.
Job descriptions

C.
Organization chart

D.
Skills inventory

Explanation:

A skills inventory would help identify- the available resources, any gaps and the training
requirements for developing resources. Proficiency testing is useful but only with regard to specific
technical skills. Job descriptions would not be as useful since they may be out of date or not
sufficiently detailed. An organization chart would not provide the details necessary to determine
the resources required for this activity.