Which of the following should be the IT governance board’s FIRST course of action?

A global financial enterprise has been experiencing a substantial number of information security incidents that have directly affected its business reputation.

Which of the following should be the IT governance board’s FIRST course of action?
A . Require revisions to how security incidents are managed by the IT department.
B . Request an IT security assessment to identify the main security gaps.
C . Execute an IT maturity assessment of the security process.
D . Mandate an update to the enterprise’s IT security policy.

View Answer

Answer: B