Q18
Single choice
Which of the following BEST enables an organization to appropriately prioritize information security-focused projects?