An information security manager is reviewing the impact of a regulation on the organization’s human resources system.

exams CISM V1 CISM exam 0 Comments

An information security manager is reviewing the impact of a regulation on the organization’s human resources system.

The NEXT course of action should be to:
A . perform a gap analysis of compliance requirements
B . assess the penalties for noncompliance.
C . review the organization s most recent audit report
D . determine the cost of compliance

Answer: A