CISM: Certified Information Security Manager

Question

An organization has acquired an Internet sales company to expand its sales department. The information security manager's FIRST step to ensure that the security policy framework covers the new business model is to:

Explanation

A gap analysis compares the existing security policy framework with the acquired business’s processes, risks, and policy requirements. It identifies missing or conflicting policy coverage that must be addressed before policies can be integrated or implemented.

CISM: Certified Information Security Manager

AstroTutor

Notes

Readiness

QuestionQ74

Community Discussion