You are the owner of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks. What is this risk strategy called?

• A.Risk bearing
• B.Risk passing
• C.Risk neutral
• D.Risk avoiding

Comment: *

Name: *

Email: *

Verification: *

Which of these control objectives are NOT in the domain "12.OPERATIONAL SAFETY"?

• A.Test data
• B.Protection against malicious code
• C.Redundancies
• D.Technical vulnerability management

Comment: *

Name: *

Email: *

Verification: *

Responsibilities for information security in projects should be defined and allocated to:

• A.the InfoSec officer
• B.specified roles defined in the used project management method of the organization
• C.the owner of the involved asset
• D.the project manager

Comment: *

Name: *

Email: *

Verification: *

What is the best description of a risk analysis?

• A.A risk analysis is a method of mapping risks without looking at company processes.
• B.A risk analysis calculates the exact financial consequences of damages.
• C.A risk analysis helps to estimate the risks and develop the appropriate security measures.

Comment: *

Name: *

Email: *

Verification: *

What is the most important reason for applying the segregation of duties?

• A.Segregation of duties makes it easier for a person who is readywith his or her part of the work to take time off or to take over the work of another person.
• B.Segregation of duties ensures that, when a person is absent, it can be investigated whether he or she has been committing fraud.
• C.Tasks and responsibilities must be separated in order to minimize the opportunities for business assets to be misused or changed, whether the change be unauthorized or unintentional.
• D.Segregation of duties makes it clear who is responsible for what.

Comment: *

Name: *

Email: *

Verification: *