Which of the following represents the BEST method for obtaining business unit acceptance of security controls within an organization?
Allow the business units to decide which controls apply to their systems, such as the encryption of sensitive data
Create separate controls for the business units based on the types of business and functions they perform
Ensure business units are involved in the creation of controls and defining conditions under which they must be applied
Provide the business units with control mandates and schedules of audits for compliance validation
Submit