Which of the following processes is the FIRST step in establishing an information security policy?

Which of the following processes is the FIRST step in establishing an information security policy?
A . Review of current global standards
B . Business risk assessment
C . Security controls evaluation
D . Information security audit

View Answer

Answer: B