December 22, 2021 by Admin
Which of the following would be the FIRST step in establishing an information security program?
- Develop the security policy.
- Develop security operating procedures.
- Develop the security plan.
- Conduct a security controls study.
Explanation:
A security plan must be developed to implement the security strategy. All of the other choices should follow the development of the security plan.