Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates.
What is one proven method to account for common elements found within separate regulations and/or standards?

• A.Develop a crosswalk
• B.Use the Find function of your word processor
• C.Design your program to meet the strictest government standards
• D.Hire a GRC expert

Comment: *

Name: *

Email: *

Verification: *

Which of the following best describes the purpose of the International Organization for Standardization (ISO) 27002 standard?

• A.To provide effective security management practice and to provide confidence in inter-organizational dealings
• B.To provide a common basis for developing organizational security standards
• C.To established guidelines and general principles for initiating, implementing, maintaining, and improving information security management within an organization
• D.To give information security management recommendations to those who are responsible for initiating, implementing, or maintaining security in their organization.

Comment: *

Name: *

Email: *

Verification: *

The process for management approval of the security certification process which states the risks and mitigation of such risks of a given IT system is called

• A.Alignment with business practices and goals.
• B.Security certification
• C.Security system analysis
• D.Security accreditation

Comment: *

Name: *

Email: *

Verification: *

The Information Security Governance program MUST:

• A.integrate with other organizational governance processes
• B.support user choice for Bring Your Own Device (BYOD)
• C.show a return on investment for the organization
• D.integrate with other organizational governance processes

Comment: *

Name: *

Email: *

Verification: *

Which wireless encryption technology makes use of temporal keys?

• A.Wireless Equivalence Protocol (WEP)
• B.Extensible Authentication Protocol (EAP)
• C.Wi-Fi Protected Access version 1 (WPA2)
• D.Wireless Application Protocol (WAP)

Comment: *

Name: *

Email: *

Verification: *