The Information Security Governance program MUST:

• A.integrate with other organizational governance processes
• B.support user choice for Bring Your Own Device (BYOD)
• C.integrate with other organizational governance processes
• D.show a return on investment for the organization

Comment: *

Name: *

Email: *

Verification: *

What is a difference from the list below between quantitative and qualitative Risk Assessment?

• A.Quantitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)
• B.Quantitative risk assessments result in an exact number (in monetary terms)
• C.Qualitative risk assessments map to business objectives
• D.Qualitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)

Comment: *

Name: *

Email: *

Verification: *

Scenario: The new CISO was informed of all the Information Security projects that the section has in progress.
Two projects are over a year behind schedule and way over budget.
Which of the following will be most helpful for getting an Information Security project that is behind schedule back on schedule?

• A.More training of staff members
• B.Involve internal audit
• C.More frequent project milestone meetings
• D.Upper management support

Comment: *

Name: *

Email: *

Verification: *

Which of the following can the company implement in order to avoid this type of security issue in the future?

• A.A security training program for developers
• B.A audit management process
• C.Network based intrusion detection systems
• D.A risk management process

Comment: *

Name: *

Email: *

Verification: *

If your organization operates under a model of "assumption of breach", you should:

• A.Establish active firewall monitoring protocols
• B.Purchase insurance for your compliance liability
• C.Focus your security efforts on high value assets
• D.Protect all information resource assets equally

Comment: *

Name: *

Email: *

Verification: *