CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is MOST important when putting an organization’s security policy into effect?

A Assessing compliance requirements
B Identifying threats and vulnerabilities
C Benchmarking against industry standards
D Obtaining management support

Explanation

Management support provides the authority, resources, accountability, and organizational commitment required to implement and enforce a security policy. Risk, compliance, and industry-standard assessments can guide the policy, but they do not ensure its adoption or enforcement without management backing.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1604

Community Discussion