Which of the following should an information security manager do NEXT after creating a roadmap to execute the strategy for an information security program?

A. Develop a project plan to implement the strategy

B. Obtain consensus on the strategy from the executive board

C. Define organizational risk tolerance

D. Review alignment with business goals








 

Suggested Answer: A



This question is in CISM exam 
For getting Certified Information Security Manager Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.