Which of the following is MOST appropriate for inclusion in an information security strategy?

Minimum standards for securing the technical infrastructure should be defined in a security:

When a security standard conflicts with a business objective, the situation should be resolved by:

The cost of implementing a security control should not exceed the:

The MOST important component of a privacy policy is:

Which of the following individuals would be in the BEST position to sponsor the creation of an information
security steering group?

Successful implementation of information security governance will FIRST require:

Which of the following is characteristic of centralized information security management?

Retention of business records should PRIMARILY be based on:

Investments in information security technologies should be based on: