Systems Security Certified Practitioner – SSCP – Question0411 - Systems Security Certified Practitioner

The preliminary steps to security planning include all of the following EXCEPT which of the following?

A. Establish objectives.
B. List planning assumptions.
C. Establish a security audit function.
D. Determine alternate courses of action

Correct Answer: C

Explanation:

The keyword within the question is: preliminary This means that you are starting your effort, you cannot audit if your infrastructure is not even in place. Reference used for this question: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.