What is the BEST reason for having a formal request for proposal process?

• A.Creates a timeline for purchasing and budgeting
• B.Informs suppliers a company is going to make a purchase
• C.Clearly identifies risks and benefits before funding is spent
• D.Allows small companies to compete with larger companies

Comment: *

Name: *

Email: *

Verification: *

Creating a secondary authentication process for network access would be an example of?

• A.Defense in depth cost enumerated costs
• B.Anti-virus for mobile devices
• C.Nonlinearities in physical security performance metrics
• D.System hardening and patching requirements

Comment: *

Name: *

Email: *

Verification: *

Which International Organization for Standardization (ISO) below BEST describes the performance of risk management, and includes a five-stage risk management methodology.

• A.ISO 27001
• B.ISO 27002
• C.ISO 27004
• D.ISO 27005

Comment: *

Name: *

Email: *

Verification: *

Risk appetite is typically determined by which of the following organizational functions?

• A.Audit and compliance
• B.Security
• C.Board of Directors
• D.Business units

Comment: *

Name: *

Email: *

Verification: *

When selecting a security solution with reoccurring maintenance costs after the first year, the CISO should:
(choose the BEST answer)

• A.Defer selection until the market improves and cash flow is positive
• B.Communicate future operating costs to the CIO/CFO and seek commitment from them to ensure the new solution's continued use
• C.Implement the solution and ask for the increased operating cost budget when it is time
• D.The CISO should cut other essential programs to ensure the new solution's continued use

Comment: *

Name: *

Email: *

Verification: *