フリー問題

問題文

A newly appointed security leader finds that the team publishes rules and runs scanners but has never written down what the security program exists to achieve or how that purpose serves the business. Executives cannot say why the program is funded. What should the leader produce first?

選択肢

1. The program charter must state mission definition requirements before any endorsed specification.
2. The program charter must state policy issuance rules before any endorsed specification.
3. The program charter must state relationship building records before any endorsed specification.
4. The program charter must state indicator selection procedures before any endorsed specification.