Answer B is the correct answer. Legal and Regulatory obligations of the organisation need to be reflected in the Information security policy to ensure compliance with legal and regulatory obligations. Top risks or first risks one has to manage is Legal risk. and the Information Security policy provides a high level outline on how the organisation wll do this.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
CHUEY
3 months ago