Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements.
During your investigation of the rumored compromise, you discover that data has been breached and that the repository of stolen data is on a server located in a foreign country. Your team now has full access to the data on the foreign server.
What action should you take FIRST?

• A.Destroy the repository of stolen data
• B.Consult with other executives to develop an action plan
• C.Contact your local law enforcement agency
• D.Contract with a credit reporting company for paid monitoring services for affected customers

Comment: *

Name: *

Email: *

Verification: *

What is the primary reason for performing vendor management?

• A.To establish a vendor selection process
• B.To understand the risk coverage that are being mitigated by the vendor
• C.To document the relationship between the company and the vendor
• D.To define the partnership for long-term success

Comment: *

Name: *

Email: *

Verification: *

A digital signature addresses which of the following concerns?

• A.Unauthorized reading
• B.Message theft
• C.Message copying
• D.Message alteration

Comment: *

Name: *

Email: *

Verification: *

Which of the following information would MOST likely be reported at the board-level within an organization?

• A.System scanning trends and results as they pertain to insider and external threat sources
• B.The numbers and types of cyberattacks experienced by the organization since the last assembly of the membership
• C.The capabilities of a security program in terms of staffing support
• D.Significant risks and security incidents that have been discovered since the last assembly of the membership

Comment: *

Name: *

Email: *

Verification: *

Risk appetite is typically determined by which of the following organizational functions?

• A.Audit and compliance
• B.Security
• C.Business units
• D.Board of Directors

Comment: *

Name: *

Email: *

Verification: *