Which of the following should occur EARLIEST in a business continuity management lifecycle?

• A.Identifying critical business processes
• B.Carrying out a threat and risk assessment
• C.Developing a training and awareness program
• D.Defining business continuity procedures

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important for the IS auditor to verify when reviewing the development process of a security policy?

• A.Evidence of active involvement of key stakeholders
• B.Output from the enterprise's risk management system
• C.Identification of the control framework
• D.Evidence of management approval

Comment: *

Name: *

Email: *

Verification: *

.What influences decisions regarding criticality of assets?

• A.The business criticality of the data to be protected
• B.Internal corporate politics
• C.The business criticality of the data to be protected, and the scope of the impact upon the organization as a whole
• D.The business impact analysis

Comment: *

Name: *

Email: *

Verification: *

The business owner's approval of software changes being moved into production is PRIMARILY necessary
to:

• A.ensure that an application functionality requirement is satisfied.
• B.prevent unauthorized access to data.
• C.inform management of deployments of new functionality.
• D.confirm there is a process to control system changes.

Comment: *

Name: *

Email: *

Verification: *

Which of the following findings should be of GREATEST concern to an IS auditor performing a review of IT operations?

• A.Changes to the job scheduler application's parameters are not approved and reviewed by an operations supervisor
• B.Operations shift turnover logs are not utilized to coordinate and control the processing environment.
• C.The job scheduler application has not been designed to display pop-up error messages
• D.Access to the job scheduler application has not been restricted to a maximum of two staff members.

Comment: *

Name: *

Email: *

Verification: *