Which of the following is MOST relevant to creating the policy?

exams CISA CISA exam 0 Comments

A small organization is experiencing rapid growth and plans to create a new information security policy.

Which of the following is MOST relevant to creating the policy?
A . Industry standards
B . The business impact analysis
C . The business objectives
D . Previous audit recommendations

Answer: C