Which of the following techniques is used for understanding the "environment" in which a business operates?

• A.PEST analysis
• B.Critical success factor analysis
• C.SWOT analysis
• D.Market segmentation

Comment: *

Name: *

Email: *

Verification: *

How does an enterprise benefit from implementing a set of key risk indicators (KRIs)?

• A.The set of KRIs remains relevant over time.
• B.Risk exposures are monitored to ensure they remain within risk appetite.
• C.The need for a formal risk and control assessment program is eliminated.
• D.The frequency of risk data gathering and reporting is minimized.

Comment: *

Name: *

Email: *

Verification: *

An enterprise has lost an unencrypted backup tape of archived customer dat a. A data breach report is not mandatory in the relevant jurisdiction. From an ethical standpoint, what should the enterprise do NEXT?

• A.Mandate a review of backup tape inventory procedures.
• B.Require an evaluation of storage facility vendors.
• C.Communicate the breach to customers.
• D.Initiate disciplinary proceedings against relevant employees.

Comment: *

Name: *

Email: *

Verification: *

An enterprise wants to reduce the complexity of its data assets while ensuring impact to the business is minimized during the transition. Which of the following should be done FIRST?

• A.Remove applications that are not aligned with the information architecture.
• B.Review the information architecture.
• C.Review the information classification and retention policies
• D.Assess current information ownership.

Comment: *

Name: *

Email: *

Verification: *

Which of the following MUST be established before implementing an information architecture that restricts access to data based on sensitivity?

• A.Risk and control frameworks
• B.Classification and ownership
• C.Probability and impact analysis
• D.Security and privacy policies

Comment: *

Name: *

Email: *

Verification: *