Assessment item 2 – Security policy and standards The CISO’s priority is to revise ACME’s enterprise information security policy and specific security control standard requirements. To facilitate this the CISO has published a strategic security view, which supports ACMEs corporate aspirations. This strategic view reads as follows:
Assessment item 2 – Security policy and standards The CISO’s priority is to revise ACME’s enterprise information security policy and specific security control standard…