Which of the following would be helpful to reduce the amount of time needed by an incident response team to determine appropriate actions?

• A.Defining incident severity levels during a business impact analysis (BIA)
• B.Validating the incident response plan against industry best practices
• C.Rehearsing incident response procedures, roles, and responsibilities
• D.Providing annual awareness training regarding incident response for team members

Comment: *

Name: *

Email: *

Verification: *

Which of the following steps in conducting a risk assessment should be performed FIRST?

• A.Identity business assets
• B.Identify business risks
• C.Assess vulnerabilities
• D.Evaluate key controls

Comment: *

Name: *

Email: *

Verification: *

Which of the following stakeholders would provide the BEST guidance in aligning the information security strategy with organizational goals?

• A.Chief information security officer (CISO)
• B.Chief information officer (CIO)
• C.information security steering committee
• D.Board of directors

Comment: *

Name: *

Email: *

Verification: *

A risk analysis should:

• A.include a benchmark of similar companies in its scope.
• B.assume an equal degree of protection for all assets.
• C.address the potential size and likelihood of loss.
• D.give more weight to the likelihood vs. the size of the loss.

Comment: *

Name: *

Email: *

Verification: *

Acceptable risk is achieved when:

• A.residual risk is minimized.
• B.transferred risk is minimized.
• C.control risk is minimized.
• D.inherent risk is minimized.

Comment: *

Name: *

Email: *

Verification: *