What is the first step in a structured approach to come up with this measure?

As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an

organisational measure to protect laptop computers.

What is the first step in a structured approach to come up with this measure?
A . Appoint security staff
B . Encrypt all sensitive information
C . Formulate a policy
D . Set up an access control procedure

View Answer

Answer: C