An organization’s information security strategic plan MUST be reviewed

exams CISSP CISSP exam 0 Comments

An organization’s information security strategic plan MUST be reviewed
A . whenever there are significant changes to a major application.
B . quarterly, when the organization’s strategic plan is updated.
C . whenever there are major changes to the business.
D . every three years, when the organization’s strategic plan is updated.

Answer: C