Which of the following BEST indicates that information security governance and corporate governance are integrated?

• A.A cost-benefit analysis is conducted on all information security initiatives.
• B.The board is regularly informed of information security key performance indicators (KPIs),
• C.The information security team is aware of business goals.
• D.The information security steering committee is composed of business leaders.

Comment: *

Name: *

Email: *

Verification: *

A cloud application used by an organization is found to have a serious vulnerability. After assessing the risk, which of the following would be the information security manager's BEST course of action?

• A.Report the situation to the business owner of the application.
• B.Initiate the organization's incident response process.
• C.Instruct the vendor to conduct penetration testing.
• D.Suspend the connection to the application in the firewall

Comment: *

Name: *

Email: *

Verification: *

What should be an information security manager's MOST important consideration when developing a multi-year plan?

• A.Ensuring alignment with the plans of other business units
• B.Demonstrating projected budget increases year after year
• C.Allowing the information security program to expand its capabilities
• D.Ensuring contingency plans are in place for potential information security risks

Comment: *

Name: *

Email: *

Verification: *

Management decisions concerning information security investments will be MOST effective when they are based on:

• A.the formalized acceptance of risk analysis by management,
• B.an annual loss expectancy (ALE) determined from the history of security events,
• C.the reporting of consistent and periodic assessments of risks.
• D.a process for identifying and analyzing threats and vulnerabilities.

Comment: *

Name: *

Email: *

Verification: *

Which is the BEST method to evaluate the effectiveness of an alternate processing site when continuous uptime is required?

• A.Simulation test
• B.Parallel test
• C.Full interruption test
• D.Tabletop test

Comment: *

Name: *

Email: *

Verification: *