Q1
Single choice
A marketing agency has developed its own risk assessment approach as part of the ISMS implementation.
Is this acceptable?