You are the CISO of a commercial social media organization. The leadership wants to rapidly create new methods of sharing customer data through creative linkages with mobile devices. You have voiced concern about privacy regulations but the velocity of the business is given priority. Which of the following BEST describes this organization?

• A.Risk tolerant
• B.Risk minimal
• C.Risk conditional
• D.Risk averse

Comment: *

Name: *

Email: *

Verification: *

You have recently drafted a revised information security policy. From whom should you seek endorsement in order to have the GREATEST chance for adoption and implementation throughout the entire organization?

• A.Chief Information Security Officer
• B.Chief Information Officer
• C.Chief Information Officer
• D.Chief Executive Officer

Comment: *

Name: *

Email: *

Verification: *

What is the primary reason for performing a return on investment analysis?

• A.To determine the annual rate of loss
• B.To decide is the solution costs less than the risk it is mitigating
• C.To decide between multiple vendors
• D.To determine the current present value of a project

Comment: *

Name: *

Email: *

Verification: *

Which represents PROPER separation of duties in the corporate environment?

• A.Information Security and Identity Access Management teams perform two distinct functions
• B.Developers and Network teams both have admin rights on servers
• C.Information Security and Network teams perform two distinct functions
• D.Finance has access to Human Resources data

Comment: *

Name: *

Email: *

Verification: *

To make sure that the actions of all employees, applications, and systems follow the organization's rules and regulations can BEST be described as which of the following?

• A.Asset management
• B.Compliance management
• C.Security management
• D.Risk management

Comment: *

Name: *

Email: *

Verification: *