When information security management is receiving an increased number of false positive incident reports, which of the following is MOST important to review?

exams CISM V1 CISM exam 0 Comments

When information security management is receiving an increased number of false positive incident reports, which of the following is MOST important to review?
A . The security awareness programs
B . Firewall logs
C . The risk management processes
D . Post-incident analysis results

Answer: D