A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old. After reading it, what should be the CISO's FIRST priority?

Question

Quizplus · Accepted Answer

The CISO's first priority should be to review the recommendations and follow up to see if audit implemented the changes. This will help the CISO to understand the current state of the company's information security program and to identify any areas that need improvement.

A New CISO Just Started with a Company and on the CISO's