A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

• A.Alignment with the business
• B.Effective use of existing technologies
• C.Leveraging existing implementations
• D.Proper budget management

Comment: *

Name: *

Email: *

Verification: *

The BEST organization to provide a comprehensive, independent and certifiable perspective on established security controls in an environment is

• A.Penetration testers
• B.External Audit
• C.Internal Audit
• D.Forensic experts

Comment: *

Name: *

Email: *

Verification: *

Which of the following terms is used to describe the unexpected expansion of project deliverables?

• A.Vendor management
• B.Scope compression
• C.Scope creep
• D.Results management

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be determined while defining risk management strategies?

• A.IT architecture complexity
• B.Organizational objectives and risk tolerance
• C.Risk assessment criteria
• D.Enterprise disaster recovery plans

Comment: *

Name: *

Email: *

Verification: *

To make sure that the actions of all employees, applications, and systems follow the organization's rules and regulations can BEST be described as which of the following?

• A.Security management
• B.Compliance management
• C.Asset management
• D.Risk management

Comment: *

Name: *

Email: *

Verification: *