Which of the following is an information security manager’s BEST course of action when informed of decision to reduce funding for the information security program?

Which of the following is an information security manager’s BEST course of action when informed of decision to reduce funding for the information security program?
A . Remove overlapping security controls
B . Prioritize security projects based on risk.
C . Design key risk indicators (KRIs)
D . Create a business case appeal decision.

View Answer

Answer: B