Q53
Single choice
Which of the following is MOST important to ensure when considering exceptions to an information security policy?