Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights.
Which of the following would be the MOST concerning?

• A.Lack of periodic examination of access rights
• B.Lack of reporting of a successful denial of service attack on the network.
• C.Failure to notify police of an attempted intrusion
• D.Lack of notification to the public of disclosure of confidential information

Comment: *

Name: *

Email: *

Verification: *

The formal certification and accreditation process has four primary steps, what are they?

• A.Evaluating, describing, testing and authorizing
• B.Auditing, documenting, verifying, certifying
• C.Evaluating, purchasing, testing, authorizing
• D.Discovery, testing, authorizing, certifying

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of security awareness is to:

• A.Put employees on notice in case follow-up action for noncompliance is necessary
• B.Meet legal and regulatory requirements.
• C.Ensure that security policies are read.
• D.Encourage security-conscious employee behavior.

Comment: *

Name: *

Email: *

Verification: *

You have implemented the new controls. What is the next step?

• A.Document the process for the stakeholders
• B.Update the audit findings report
• C.Perform a risk assessment
• D.Monitor the effectiveness of the controls

Comment: *

Name: *

Email: *

Verification: *

The Annualized Loss Expectancy (Before) minus Annualized Loss Expectancy (After) minus Annual Safeguard Cost is the formula for determining:

• A.Single Loss Expectancy
• B.Life Cycle Loss Expectancy
• C.Safeguard Value
• D.Cost Benefit Analysis

Comment: *

Name: *

Email: *

Verification: *