Q76
Single choice
A new regulatory requirement affecting an organization's information security program is released.
Which of the following should be the information security manager's FIRST course of action?