EC-Council
712-50 · Question #236
Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small…
The correct answer is C. Define formal roles and responsibilities for Information Security. See the full explanation below for the reasoning.
Question
Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years. Which of the following would be the FIRST step when addressing Information Security formally and consistently in this organization?
Options
- AContract a third party to perform a security risk assessment
- BDefine formal roles and responsibilities for Internal audit functions
- CDefine formal roles and responsibilities for Information Security
- DCreate an executive security steering committee
How the community answered
(52 responses)- A10% (5)
- B13% (7)
- C73% (38)
- D4% (2)
Community Discussion
No community discussion yet for this question.