CompTIA Security+ SY0-701 Practice Question
Your organization has recently undergone a series of changes, including the implementation of new technologies and a shift in strategic business objectives. To ensure that the information security policies remain effective and relevant, what should the security governance team do first?
Review and update the existing policies to ensure they align with current business objectives and technological changes.
Only inform the relevant departments about the changes without modifying existing policies.
Immediately conduct a new risk assessment to evaluate potential vulnerabilities introduced by the new technologies.
Revise the security strategic plan before any changes to policies are considered.