Dataflow diagrams are used by IT auditors to:

• A.Graphically summarize data paths and storage processes.
• B.Order data hierarchically
• C.Highlight high-level data definitions
• D.Portray step-by-step details of data generation.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is of MOST importance when security leaders of an organization are required to align security to influence the culture of an organization?

• A.Poses a strong auditing background
• B.Poses a strong technical background
• C.Understand the business goals of the organization
• D.Understand all regulations affecting the organization

Comment: *

Name: *

Email: *

Verification: *

Which of the following represents the MOST negative impact resulting from an ineffective security governance program?

• A.Improper use of information resources
• B.Reduction of budget
• C.Fines for regulatory non-compliance
• D.Decreased security awareness

Comment: *

Name: *

Email: *

Verification: *

When should IT security project management be outsourced?

• A.On projects not forecasted in the yearly budget
• B.When organizational resources are limited
• C.When the benefits of outsourcing outweigh the inherent risks of outsourcing
• D.On new, enterprise-wide security initiatives

Comment: *

Name: *

Email: *

Verification: *

The formal certification and accreditation process has four primary steps, what are they?

• A.Auditing, documenting, verifying, certifying
• B.Discovery, testing, authorizing, certifying
• C.Evaluating, purchasing, testing, authorizing
• D.Evaluating, describing, testing and authorizing

Comment: *

Name: *

Email: *

Verification: *