Regulatory requirements typically force organizations to implement

• A.Mandatory controls
• B.Discretionary controls
• C.Financial controls
• D.Optional controls

Comment: *

Name: *

Email: *

Verification: *

The ability to demand the implementation and management of security controls on third parties providing services to an organization is_________________________.

• A.Compliance management
• B.Security Governance
• C.Vendor management
• D.Disaster recovery

Comment: *

Name: *

Email: *

Verification: *

What is the primary reason for performing a return on investment analysis?

• A.To determine the current present value of a project
• B.To determine the annual rate of loss
• C.To decide between multiple vendors
• D.To decide is the solution costs less than the risk it is mitigating

Comment: *

Name: *

Email: *

Verification: *

Which of the following conditions would be the MOST probable reason for a security project to be rejected by the executive board of an organization?

• A.The Return on Investment (ROI) is larger than 10 months
• B.The NPV of the project is negative
• C.The Net Present Value (NPV) of the project is positive
• D.The ROI is lower than 10 months

Comment: *

Name: *

Email: *

Verification: *

The primary purpose of a risk register is to:

• A.Track individual risk assessments
• B.Maintain a log of discovered risks
• C.Develop plans for mitigating identified risks
• D.Coordinate the timing of scheduled risk assessments

Comment: *

Name: *

Email: *

Verification: *