Why is it vitally important that senior management endorse a security policy?

• A.So that they can be held legally accountable.
• B.So that employees will follow the policy directives.
• C.So that external bodies will recognize the organizations commitment to security.
• D.So that they will accept ownership for security within the organization.

Comment: *

Name: *

Email: *

Verification: *

What is an approach to estimating the strengths and weaknesses of alternatives used to determine options, which provide the BEST approach to achieving benefits while preserving savings called?

• A.Return on Investment
• B.Economic Impact analysis
• C.Business Impact Analysis
• D.Cost-benefit analysis

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements below regarding Key Performance indicators (KPIs) are true?

• A.Development of KPI's are most useful when done independently
• B.They are a strictly quantitative measure of success
• C.They should be standard throughout the organization versus domain-specific so they are more easily correlated
• D.They are a strictly qualitative measure of success

Comment: *

Name: *

Email: *

Verification: *

The company decides to release the application without remediating the high-risk vulnerabilities.
Which of the following is the MOST likely reason for the company to release the application?

• A.The company does not believe the security vulnerabilities to be real
• B.The company lacks the tools to perform a vulnerability assessment
• C.The company lacks a risk management process
• D.The company has a high risk tolerance

Comment: *

Name: *

Email: *

Verification: *

A global health insurance company is concerned about protecting confidential information. Which of the following is of MOST concern to this organization?

• A.Alignment with International Organization for Standardization (ISO) standards.
• B.Alignment with financial reporting regulations for each country where they operate.
• C.Compliance to the Payment Card Industry (PCI) regulations.
• D.Compliance with patient data protection regulations for each country where they operate.

Comment: *

Name: *

Email: *

Verification: *