You are right to say that MTO is not a target, it is much more an aptitude . All RTO, RPO and SDO are some sort of targets, but according to my understanding of the Review Manual none of them is directly about normality . If I would need to select the ...
C. strike a balance between business and security requirements. ------------------------------ Syed Abdul Faheem Information Security Consultant ------------------------------
B. ------------------------------ Muzaffer Mohammed Senior Security Engineer ------------------------------
My Answer is B. Identification of network applications to be externally accessed Justification: First of all we need to understand and identify what network applications (Assets) we need to protect, after that we can identify what are the threats and ...