When an organization hires a new information security manager, which of the following goals
should this individual pursue FIRST?
A.
Develop a security architecture
B.
Establish good communication with steering committee members
C.
Assemble an experienced staff
D.
Benchmark peer organizations
Explanation:
New information security managers should seek to build rapport and establish lines of
communication with senior management to enlist their support. Benchmarking peer organizations
is beneficial to better understand industry best practices, but it is secondary to obtaining senior
management support. Similarly, developing a security architecture and assembling an
experienced staff are objectives that can be obtained later.