Friday, October 17, 2014

CISSP Exam Preparation (Question 266)

(266) When developing an information security policy, what is the FIRST step that should be taken?

A. Obtain copies of mandatory regulations.
B. Gain management approval.
C. Seek acceptance from other departments.
D. Ensure policy is compliant with current working practices.

Correct Answer: B


Explanation/Reference: None

- Muhammad Idham Azhari

No comments: