QuestionQ11Verified/Governance and Management of ITCopy linkReport a problemAsk AstroTutorSave questionAn organization’s information security policies should be developed primarily based on:Aindustry best practices.Benterprise architecture (EA).Ca risk management process.Dpast information security incidents.Show AnswerAnswerExplanationInformation security policies should be based primarily on a risk management process so that controls, requirements, and priorities address the organization’s specific threats, vulnerabilities, impacts, and risk appetite.Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion