Which of the following is not a guideline dealing with information security compliance?
A) Maintain stable information security controls even when business changes occur
B) Design information systems to permit later auditing
C) Hold third party service providers to high standards
D) Monitor personnel to prevent information misuse or loss

Question

Quizplus · Accepted Answer

Maintaining stable information security controls even when business changes occur is not a guideline for information security compliance. Compliance often requires adapting security controls to evolving business processes, regulatory requirements, and threat landscapes.

Which of the Following Is Not a Guideline Dealing with Information