Which business stakeholder is accountable for the integrity of a new information system?

• A.Project manager
• B.CISO
• C.Compliance Officer
• D.Board of directors

Comment: *

Name: *

Email: *

Verification: *

Which of the following are not stakeholders of IT security projects?

• A.Board of directors
• B.Third party vendors
• C.CISO
• D.Help Desk

Comment: *

Name: *

Email: *

Verification: *

Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture. What would be the BEST choice of security metrics to present to the BOD?

• A.All vulnerabilities that impact important production servers
• B.Only critical and high vulnerabilities that impact important production servers
• C.Only critical and high vulnerabilities on servers and desktops
• D.All vulnerabilities found on servers and desktops

Comment: *

Name: *

Email: *

Verification: *

Which of the following represents the BEST method of ensuring security program alignment to business needs?

• A.Create security consortiums, such as strategic security planning groups, that include business unit participation
• B.Create a comprehensive security awareness program and provide success metrics to business units
• C.Ensure security implementations include business unit testing and functional validation prior to production rollout
• D.Ensure the organization has strong executive-level security representation through clear sponsorship or the creation of a CISO role

Comment: *

Name: *

Email: *

Verification: *

When managing the critical path of an IT security project, which of the following is MOST important?

• A.Knowing who all the stakeholders are.
• B.Knowing the people on the data center team.
• C.Knowing the threats to the organization.
• D.Knowing the milestones and timelines of deliverables.

Comment: *

Name: *

Email: *

Verification: *