Which of the following is the MOST important consideration when evaluating the data retention policy for a global organization with regional offices in multiple countries?

• A.The policy aligns with corporate policies and practices.
• B.The policy aligns with business goals and objectives.
• C.The policy aligns with global best practices.
• D.The policy aligns with local laws and regulations.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST help to ensure that an incident receives attention from appropriate personnel in a timely manner?

• A.Requiring a dedicated incident response team
• B.Completing the incident management log
• C.Implementing incident escalation procedures
• D.Broadcasting an emergency message

Comment: *

Name: *

Email: *

Verification: *

An organization recently implemented a cloud document storage solution and removed the ability for end users to save data to their local workstation hard drives. Which of the following findings should be the IS auditor's GREATEST concern?

• A.Users are not required to sign updated acceptable use agreements.
• B.The business continuity plan (BCP) was not updated.
• C.Mobile devices are not encrypted.
• D.Users have not been trained on the new system.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would provide an IS auditor with the GREATEST assurance that data disposal controls support business strategic objectives?

• A.Media labeling policy
• B.Media recycling policy
• C.Media shredding policy
• D.Media sanitization policy

Comment: *

Name: *

Email: *

Verification: *

An organization is migrating its HR application to an Infrastructure as a Service (laaS) model in a private cloud. Who is PRIMARILY responsible for the security configurations of the deployed application's operating system?

• A.The cloud provider
• B.The operating system vendor
• C.The cloud provider's external auditor
• D.The organization

Comment: *

Name: *

Email: *

Verification: *