Which of the following should an information security manager establish FIRST to ensure security-related activities are adequately monitored?

Regular reviews of system logs are a monitoring *activity*, but they cannot be adequately performed or acted upon without established accountability.

Establishing clear accountability means assigning specific individuals or teams ownership for various security functions and their monitoring, ensuring that there is a responsible party to oversee and address security-related activities. Without clear accountability, monitoring mechanisms like log reviews or audits may be performed without clear ownership or follow-up, leading to inefficiencies or gaps.

Procedures for security assessments define *how* assessments are done, but accountability determines *who* initiates, oversees, and responds to them.

Schedules for internal audits are a part of monitoring, but accountability defines who is responsible for conducting the audits and addressing their findings.