The patching and monitoring of systems on a consistent schedule is required by?

• A.Industry best practices
• B.Audit best practices
• C.Risk Management framework
• D.Local privacy laws

Comment: *

Name: *

Email: *

Verification: *

You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?

• A.Chief Executive Officer
• B.Chief Information Security Officer
• C.Chief Information Officer
• D.Chief Legal Counsel

Comment: *

Name: *

Email: *

Verification: *

This occurs when the quantity or quality of project deliverables is expanded from the original project plan.

• A.Deliverable expansion
• B.Deadline extension
• C.Scope modification
• D.Scope creep

Comment: *

Name: *

Email: *

Verification: *

The effectiveness of social engineering penetration testing using phishing can be used as a Key Performance Indicator (KPI) for the effectiveness of an organization's

• A.Anti-Spam controls.
• B.Risk Management Program.
• C.Security Awareness Program.
• D.Identity and Access Management Program.

Comment: *

Name: *

Email: *

Verification: *

A missing/ineffective security control is identified. Which of the following should be the NEXT step?

• A.Establish Key Risk Indicators
• B.Perform an audit to measure the control formally
• C.Escalate the issue to the IT organization
• D.Perform a risk assessment to measure risk

Comment: *

Name: *

Email: *

Verification: *