How often should the Statements of Standards for Attestation Engagements-16 (SSAE16)/International Standard on Assurance Engagements 3402 (ISAE3402) report of your vendors be reviewed?

• A.Quarterly
• B.Semi-annually
• C.Bi-annually
• D.Annually

Comment: *

Name: *

Email: *

Verification: *

What principle is used when a CISO evaluates controls to ensure they satisfy the organization's operational needs?

• A.Proper fiduciary controls
• B.Leveraging existing technology
• C.Alignment to the business
• D.Least privilege

Comment: *

Name: *

Email: *

Verification: *

What are the primary reasons for the development of a business case for a security project?

• A.To estimate risk and negate liability to the company
• B.To understand the attack vectors and attack sources
• C.To communicate risk and forecast resource needs
• D.To forecast usage and cost per software licensing

Comment: *

Name: *

Email: *

Verification: *

An organization information security policy serves to___________________.

• A.establish budgetary input in order to meet compliance requirements
• B.define security configurations for systems
• C.define relationship with external law enforcement agencies
• D.establish acceptable systems and user behavior

Comment: *

Name: *

Email: *

Verification: *

You have a system with 2 identified risks. You determine the probability of one risk occurring is higher than the

• A.Risk impact comparison
• B.Relative likelihood of event
• C.Comparative threat analysis
• D.Controlled mitigation effort

Comment: *

Name: *

Email: *

Verification: *