Which of the Following Is Not a Step in Information

question 56

Multiple Choice

Which of the following is not a step in information security management?

• A)Define the controls that the threats can impose.
• B)Establish an information security policy.
• C)Implement controls that address the risks.
• D)Identify the threats that can attack the firm's information resources.

---

Definitions:

Variable

In finance and economics, a variable represents a quantity or factor that can change and influence outcomes, such as price, interest rates, or investments.

Fixed

Pertaining to assets, costs, or charges that do not vary with the level of production or sales in the short term.

Cost Behavior Analysis

The study of how specific costs change in relation to changes in an organization's activity level.

Business Activity

Any actions undertaken by a company as part of its operations, including production, sales, marketing, and administration.