When developing security processes for handling credit card data on the business unit's information system, the information security manager should FIRST:

A. ensure that systems that handle credit card data are segmented.

B. review industry best practices for handling secure payments.

C. ensure alignment with industry encryption standards.

D. review corporate policies regarding credit card information.








 

Suggested Answer: D



This question is in CISM exam 
For getting Certified Information Security Manager Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.