CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ81

VerifiedInformation Security Governance

Which of the following should be performed FIRST in response to a new information security regulation?

Explanation

A gap analysis compares the new regulatory requirements with the organization’s current security controls, policies, and processes to identify compliance deficiencies that must be addressed.

Community Discussion

No comments yet. Be the first to start the discussion!