A global retail organization is looking to implement a consistent Disaster Recovery and Business Continuity Process across all of its business units. Which of the following standards and guidelines can BEST address this organization's need?

• A.Information Technology Infrastructure Library (ITIL)
• B.Payment Card Industry Data Security Standards (PCI-DSS)
• C.International Organization for Standardizations - 27005 (ISO-27005)
• D.International Organization for Standardizations - 22301 (ISO-22301)

Comment: *

Name: *

Email: *

Verification: *

The Board of Directors of a publicly-traded company is concerned about the security implications of a strategic project that will migrate 50% of the organization's information technology assets to the cloud. They have requested a briefing on the project plan and a progress report of the security stream of the project. As the CISO, you have been tasked with preparing the report for the Chief Executive Officer to present.
Using the Earned Value Management (EVM), what does a Cost Variance (CV) of -1,200 mean?

• A.The project is under budget
• B.The project budget has reserves
• C.The project cost is in alignment with the budget
• D.The project is over budget

Comment: *

Name: *

Email: *

Verification: *

What is a difference from the list below between quantitative and qualitative Risk Assessment?

• A.Quantitative risk assessments result in an exact number (in monetary terms)
• B.Qualitative risk assessments map to business objectives
• C.Qualitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)
• D.Quantitative risk assessments result in a quantitative assessment (high, medium, low, red, yellow, green)

Comment: *

Name: *

Email: *

Verification: *