December 23, 2021 by Admin

Which of the following should be an information security manager’s FIRST course of action following a decision to implement a new technology?

• Determine security controls needed to support the new technology.
• Perform a business impact analysis (BIA) on the new technology.
• Perform a return-on-investment (ROI) analysis for the new technology.
• Determine whether the new technology will comply with regulatory requirements.