When assessing the risk to the clients network, what step should you take first?

You work as an IT security auditor hired by a law firm in Boston. You have been assigned the responsibility to audit the client for security risks.

When assessing the risk to the clients network, what step should you take first?
A . Analyzing, categorizing and prioritizing resources
B . Evaluating the existing perimeter and internal security
C . Checking for a written security policy
D . Analyzing the use of existing management and control architecture

View Answer

Answer: C