Which of the following is the BEST source of information for examining the classification of new data?

• A.Risk assessment results
• B.Security policy requirements
• C.Input by data custodians
• D.Current level of protection

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be of GREATEST concern to an IS auditor performing a review of information security controls?

• A.The information security policy has not been approved by the chief audit executive (CAE).
• B.The information security policy does not include mobile device provisions.
• C.The information security policy is not frequently reviewed.
• D.The information security policy has not been approved by the policy owner.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to verify the effectiveness of a data restoration process?

• A.Performing periodic reviews of physical access to backup media
• B.Performing periodic complete data restorations
• C.Validating off ne backups using software utilities
• D.Reviewing and updating data restoration policies annually

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be the MOST useful metric for management to consider when reviewing a project portfolio?

• A.Net present value (NPV) of the portfolio
• B.Cost of projects divided by total IT cost
• C.Expected return divided by total project cost
• D.Total cost of each project

Comment: *

Name: *

Email: *

Verification: *

What is the PRIMARY purpose of performing a parallel run of a now system?

• A.To train the end users and supporting staff on the new system
• B.To verify the new system provides required business functionality
• C.To reduce the need for additional testing
• D.To validate the new system against its predecessor

Comment: *

Name: *

Email: *

Verification: *