QuestionQ48Verified/Leadership and Organizational ManagementCopy linkReport a problemAsk AstroTutorSave questionWhich of the following is the first step in developing an information security strategy?APerform a technical vulnerabilities assessment.BAssess the current levels of security awareness.CPerform a business impact analysis.DAnalyze the current business strategy.Show AnswerAnswerExplanationAn information security strategy is derived from and aligned to the organization’s business strategy, objectives, and priorities. Technical vulnerability assessments, security-awareness assessments, and business impact analyses are subsequent activities that inform implementation and risk-management decisions.Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion