Which of the following should be part of an effective information security program?

exams ASIS-CPP ASIS-CPP exam 0 Comments

Which of the following should be part of an effective information security program?
A . Pre-employment screening
B . Nondisclosure agreements from employees
C . Employee awareness programs
D . Policy and procedural statements on the recognition, classification, and handling of sensitive information
E . All of the above

Answer: E