Implementation of Information Security in an Organization Should Essentially Start

Multiple Choice

Implementation of information security in an organization should essentially start with:

A) upgrading to the latest hardware and software available in the market.
B) researching and complying with the latest industry guidelines.
C) investing in the best infrastructure.
D) inventory-style auditing and risk assessment of threats.
E) employing a security consultant.