Your company has limited resources to spend on security initiatives. The Chief Financial Officer asks you to prioritize the protection of information resources based on their value to the company. It is essential that you be able to communicate in language that your fellow executives will understand. You should:

• A.Develop a cost-benefit analysis
• B.Create a detailed technical executive summary
• C.Create timelines for mitigation
• D.Calculate annual loss expectancy

Comment: *

Name: *

Email: *

Verification: *

As the CISO you need to write the IT security strategic plan.
Which of the following is the MOST important to review before you start writing the plan?

• A.Other corporate technology trends
• B.The present IT budget
• C.The existing IT environment
• D.The company business plan

Comment: *

Name: *

Email: *

Verification: *

Scenario: Your company has many encrypted telecommunications links for their world-wide operations.
Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives.
How can you reduce the administrative burden of distributing symmetric keys for your employer?

• A.Use certificate authority to distribute private keys
• B.Use asymmetric encryption for the automated distribution of symmetric key
• C.Symmetrically encrypt the key and then use asymmetric encryption to unencrypt it
• D.Use a self-generated key on both ends to eliminate the need for distribution

Comment: *

Name: *

Email: *

Verification: *

The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

• A.Due process
• B.Due Protection
• C.Due Compromise
• D.Due Care

Comment: *

Name: *

Email: *

Verification: *

An organization is required to implement background checks on all employees with access to databases containing credit card information. This is considered a security___________.

• A.Technical control
• B.Management control
• C.Procedural control
• D.Administrative control

Comment: *

Name: *

Email: *

Verification: *