You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?

• A.Risk bearing
• B.Risk avoiding
• C.Risk neutral

Comment: *

Name: *

Email: *

Verification: *

What is the most important reason for applying segregation of duties?

• A.Segregation of duties makes it clear who is responsible for what.
• B.Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
• C.Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.
• D.Segregation of duties makes it easier for a person who is ready with his or her part of the work to take time off or to take over the work of another person.

Comment: *

Name: *

Email: *

Verification: *

Your company has to ensure that it meets the requirements set down in personal data protection legislation. What is the first thing you should do?

• A.Issue a ban on the provision of personal information.
• B.Translate the personal data protection legislation into a privacy policy that is geared to the company and the contracts with the customers.
• C.Appoint a person responsible for supporting managers in adhering to the policy.
• D.Make the employees responsible for submitting their personal data.

Comment: *

Name: *

Email: *

Verification: *

In the organization where you work, information of a very sensitive nature is processed.
Management is legally obliged to implement the highest-level security measures. What is this kind of risk strategy called?

• A.Risk avoiding
• B.Risk bearing
• C.Risk neutral

Comment: *

Name: *

Email: *

Verification: *

Which of the following measures is a preventive measure?

• A.Putting sensitive information in a safe
• B.Installing a logging system that enables changes in a system to be recognized
• C.Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk
• D.Shutting down all internet traffic after a hacker has gained access to the company systems

Comment: *

Name: *

Email: *

Verification: *