Last Updated on December 22, 2021 by Admin
An information security manager is developing a business case for an investment in an information security control. The FIRST step should be to:
- research vendor pricing to show cost efficiency
- assess potential impact to the organization
- demonstrate increased productivity of security staff
- gain audit buy-in for the security control