Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system?
Which risk response can you choose that will also cause you to update the human resource management plan?