When identifying legal and regulatory issues affecting information security, which of the following would
represent the BEST approach to developing information security policies?

Senior management commitment and support for information security can BEST be enhanced through:

The PRIMARY goal in developing an information security strategy is to:

Acceptable levels of information security risk should be determined by:

A business unit intends to deploy a new technology in a manner that places it in violation of existing information
security standards. What immediate action should an information security manager take?

Relationships among security technologies are BEST defined through which of the following?

Which of the following would be the MOST important goal of an information security governance program?

Which of the following is the MOST appropriate position to sponsor the design and implementation of a new
security infrastructure in a large global enterprise?

Which of the following is characteristic of decentralized information security management across a
geographically dispersed organization?