Question

A portion of the _________ is the logical and practical investigation of business processes and policies. This process/policy review ensures that the stated and implemented business tasks, systems, and methodologies are practical, efficient, cost-effective,but most of all (at least in relation to security governance) that they support security through the reduction of vulnerabilities and the avoidance, reduction, or mitigation of risk.

A. Hybrid assessment
B. Risk aversion process
C. Countermeasure selection
D. Documentation review

Answer 1

The correct answer is D. Documentation review.

Step-by-step explanation:

The correct answer to the question is D. Documentation review.

A documentation review is a process of examining and evaluating business processes and policies to ensure their practicality, efficiency, cost-effectiveness, and most importantly, their support for security and risk reduction.

During a documentation review, the focus is on assessing whether the stated and implemented tasks, systems, and methodologies align with the overall business objectives and security governance.