Does the organization perform regular risk assessments? If so, are the results of the risk assessments communicated to leadership? As a member of leadership for your organization, are you familiar...

Does the organization perform regular risk assessments? If so, are the results of the

risk assessments communicated to leadership?

As a member of leadership for your organization, are you familiar with the

information security policies that are currently in force?