Which of the following is the BEST tool to maintain the currency and coverage of an information
security program within an organization?
A.
The program’s governance oversight mechanisms
B.
Information security periodicals and manuals
C.
The program’s security architecture and design
D.
Training and certification of the information security team
Explanation:
While choices B, C and D will all assist the currency and coverage of the program, its governance
oversight mechanisms are the best method.