A new vendor product has been acquired to replace a legacy perimeter security product. There
are significant time constraints due to the existing solution nearing end-of-life with no options for
extended support. It has been emphasized that only essential activities be performed. Which of
the following sequences BEST describes the order of activities when balancing security posture
and time constraints?

Within an organization, there is a known lack of governance for solution designs. As a result there
are inconsistencies and varying levels of quality for the artifacts that are produced. Which of the
following will help BEST improve this situation?

During a specific incident response and recovery process action, the response team determines
that it must first speak to the person ultimately responsible for the data. With whom should the
response team speak FIRST?