When developing an information security program, what is the MOST useful source of information for determining available resources?
Answer options:
A. Proficiency test
B. Job descriptions
C. Organization chart
D. Skills inventory
Answer correct:
D
A skills inventory would help identify- the available resources, any gaps and the training requirements for developing resources. Proficiency testing is useful but only with regard to specific technical skills. Job descriptions would not be as useful since they may be out of date or not sufficiently detailed. An organization chart would not provide the details necessary to determine the resources required for this activity.