Which of the following methods are used to define contractual obligations that force a vendor to meet customer expectations?

• A.Statement of Work
• B.Service Level Agreements (SLA)
• C.Key Performance Indicators (KPI)
• D.Terms and Conditions

Comment: *

Name: *

Email: *

Verification: *

A stakeholder is a person or group:

• A.That has budget authority.
• B.That will ultimately use the system.
• C.Vested in the success and/or failure of a project or initiative and is tied to the project budget.
• D.Vested in the success and/or failure of a project or initiative regardless of budget implications.

Comment: *

Name: *

Email: *

Verification: *

Where does bottom-up financial planning primarily gain information for creating budgets?

• A.By reviewing last year's program-level costs and adding a percentage of expected additional portfolio costs
• B.By adding all planned operational expenses per quarter then summarizing them in a budget request
• C.By adding all capital and operational costs from the prior budgetary cycle, and determining potential financial shortages
• D.By adding the cost of all known individual tasks and projects that are planned for the next budgetary cycle

Comment: *

Name: *

Email: *

Verification: *

SCENARIO: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified.
Which of the following is the FIRST action the CISO will perform after receiving the audit report?

• A.Validate gaps and accept or dispute the audit findings
• B.Determine if security policies and procedures are adequate
• C.Inform peer executives of the audit results
• D.Create remediation plans to address program gaps

Comment: *

Name: *

Email: *

Verification: *

The Information Security Management program MUST protect:

• A.all organizational assets
• B.Audit schedules and findings
• C.critical business processes and revenue streams
• D.Intellectual property released into the public domain

Comment: *

Name: *

Email: *

Verification: *