The new CISO was informed of all the Information Security projects that the organization has in progress. Two projects are over a year behind schedule and over budget. Using best business practices for project management you determine that the project correctly aligns with the company goals.
Which of the following needs to be performed NEXT?

• A.Verify technical resources
• B.Verify capacity constraints
• C.Verify the scope of the project
• D.Verify the regulatory requirements

Comment: *

Name: *

Email: *

Verification: *

When gathering security requirements for an automated business process improvement program, which of the following is MOST important?

• A.Type of connection/protocol used to transfer the data
• B.Type of computer the data is processed on
• C.Type of data contained in the process/system
• D.Type of encryption required for the data once it is at rest

Comment: *

Name: *

Email: *

Verification: *

Which of the following backup sites takes the longest recovery time?

• A.Hot site
• B.Cold site
• C.Mobile backup site
• D.Warm site

Comment: *

Name: *

Email: *

Verification: *

Scenario: As you begin to develop the program for your organization, you assess the corporate culture and determine that there is a pervasive opinion that the security program only slows things down and limits the performance of the "real workers."
Which group of people should be consulted when developing your security program?

• A.Peers
• B.All of the above
• C.Executive Management
• D.End Users

Comment: *

Name: *

Email: *

Verification: *

An organization licenses and uses personal information for business operations, and a server containing that information has been compromised. What kind of law would require notifying the owner or licensee of this incident?

• A.Security incident disclosure
• B.Data breach disclosure
• C.Special circumstance disclosure
• D.Consumer right disclosure

Comment: *

Name: *

Email: *

Verification: *