Q37
Single choice
When developing an information security strategy for an organization, which of the following is MOST helpful for understanding where to focus efforts?