最高情報セキュリティ責任者 (CISO) は新しい会社と協力しており、評価中にすべての関係者が自分たちの役割を確実に理解できるようにするための法的文書が必要です。CISO は次のうちどれに各関係者に署名させる必要がありますか?
正解:C
Rules of engagement are legal documents that should be signed by all parties involved in an assessment to ensure they understand their roles and responsibilities. Rules of engagement define the scope, objectives, methods, deliverables, limitations, and expectations of an assessment project. They also specify the legal and ethical boundaries, communication channels, escalation procedures, and reporting formats for the assessment. Rules of engagement help to avoid misunderstandings, conflicts, or liabilities during or after an assessment.