Where should an InfoSec unit be placed within an organization? Where shouldn't it be placed?
Into what four areas should the InfoSec functions be divided? What are the roles that an InfoSec professional can assume? 8. What are the three areas of a SETA program?