The preliminary steps to security planning include all of the following EXCEPT which of the following?

The preliminary steps to security planning include all of the following EXCEPT which of the following?
A .  Establish objectives.
B .  List planning assumptions.
C .  Establish a security audit function.
D .  Determine alternate courses of action 

View Answer

Answer: C

Explanation: The keyword within the question is: preliminary This means that you are starting your effort, you cannot audit if your infrastructure is not even in place.

Reference used for this question: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.