During what phase of the change management process does the organisation conduct peer review of the change for accuracy and completeness?

James would like to establish a governing body for the organisation’s change management efforts. What individual or group within an organisation is typically responsible for reviewing the impact of proposed changes?

Which one of the following is not an example of a technical control?

Gary is implementing a new website architecture that uses multiple small web servers behind a load balancer. What principle of information security is Gary seeking to enforce?

Will is working with the management team in her company to classify data in an attempt to apply extra security controls that will limit the likelihood of a data breach. What principle of information security is Will trying to enforce?