Which of the following is a benefit of including a risk management framework into an organization's security approach?

A. It defines expected service levels from participating supply chain partners to ensure system outages are remediated in a timely manner.

B. It identifies specific vendor products that have been tested and approved for use in a secure environment.

C. It provides legal assurances and remedies in the event a data breach occurs.

D. It incorporates control, development, policy, and management activities into IT operations.





 

Correct Answer: D

This question is in SY0-601 exam
For getting CompTIA Security+ certificate