Are You an Information Security Governance Expert?

An extensive list of potential security threats

A detailed list of all employees and their roles

A comprehensive security strategy linked with business objectives (correct)

A set of regulations that must be followed without exception

To create a complex set of rules and regulations for employees to follow

To limit the impacts of adverse events by providing predictability for operations

To reduce the cost of information security programs

To provide assurance that information assets are protected according to their value or the risk their compromise poses to the organization (correct)

To create additional regulations for employees to follow

To reduce the need for an effective security organizational structure

To ensure compliance and provide feedback (correct)

To limit the impacts of adverse events by providing predictability for operations