Question: Which of the following would be the FIRST step in establishing an information security program?
A.) Develop the security policy.
B.) Develop security operating procedures.
C.) Develop the security plan.
D.) Conduct a security controls study.

Download pdf (with explanations) edition of this exam.