32. An information security program should include the following elements:

Вариант ответа 1 - A. Disaster recovery and business continuity planning, and definition of access control requirements and human resources policies.

Вариант ответа 2 - B. Business impact, threat and vulnerability analysis, delivery of an information security awareness program, and physical security of key installations.

Вариант ответа 3 - C. Security policy implementation, assignment of roles and responsibilities, and information asset classification.

Вариант ответа 4 - D. Senior management organizational structure, message distribution standards, and procedures for the operation of security management systems.