Who is responsible for raising awareness of the need for adequate funding for risk action plans?

Which of the following would BEST assist an information security manager in measuring the existing level of
development of security processes against their desired state?

Which of the following is the BEST tool to maintain the currency and coverage of an information security
program within an organization?

Which of the following would be the MOST significant security risk in a pharmaceutical institution?

Who should determine the appropriate classification of accounting ledger data located on a database server
and maintained by a database administrator in the IT department?

An information security program should focus on:

Which of the following is the MOST effective, positive method to promote security awareness?

The configuration management plan should PRIMARILY be based upon input from:

Which of the following events generally has the highest information security impact?

What is the MOST important success factor in launching a corporate information security awareness program?