Which of the following is the PRIMARY reason for an information security manager to periodically review existing controls?
To prioritize security initiatives
To avoid redundant controls
To align with emerging risk
To address end-user control complaints
Submit