To gain a clear understanding of the impact that a new regulatory will have on an organization’s security control, an information manager should FIRST.

exams CISM V1 CISM exam 0 Comments

To gain a clear understanding of the impact that a new regulatory will have on an organization’s security control, an information manager should FIRST.
A . Conduct a risk assessment
B . Interview senior management
C . Perform a gap analysis
D . Conduct a cost-benefit analysis

Answer: C