A Newly Hired Security Specialist Is Asked to Evaluate a Company's

Multiple Choice

A newly hired security specialist is asked to evaluate a company's network security. The security specialist discovers that users have installed personal software, the network OS has default settings, no patches have been installed, and passwords are not required to be changed regularly. Which of the following would be the first step to take?

A) Establish and enforce a security policy
B) Install software patches
C) Disable non-essential services
D) Password management