The Annualized Loss Expectancy (Before) minus Annualized Loss Expectancy (After) minus Annual Safeguard Cost is the formula for determining:

• A.Safeguard Value
• B.Cost Benefit Analysis
• C.Single Loss Expectancy
• D.Life Cycle Loss Expectancy

Comment: *

Name: *

Email: *

Verification: *

A newly appointed security officer finds data leakage software licenses that had never been used. The officer decides to implement a project to ensure it gets installed, but the project gets a great deal of resistance across the organization.
Which of the following represents the MOST likely reason for this situation?

• A.The security officer should allow time for the organization to get accustomed to her presence before initiating security projects
• B.The software is out of date and does not provide for a scalable solution across the enterprise
• C.The project was initiated without an effort to get support from impacted business units in the organization
• D.The software license expiration is probably out of synchronization with other software licenses

Comment: *

Name: *

Email: *

Verification: *

What are the primary reasons for the development of a business case for a security project?

• A.To forecast usage and cost per software licensing
• B.To communicate risk and forecast resource needs
• C.To understand the attack vectors and attack sources
• D.To estimate risk and negate liability to the company

Comment: *

Name: *

Email: *

Verification: *

Dataflow diagrams are used by IT auditors to:

• A.Order data hierarchically.
• B.Highlight high-level data definitions.
• C.Graphically summarize data paths and storage processes.
• D.Portray step-by-step details of data generation.

Comment: *

Name: *

Email: *

Verification: *

An organization licenses and uses personal information for business operations, and a server containing that information has been compromised.
What kind of law would require notifying the owner or licensee of this incident?

• A.Data breach disclosure
• B.Consumer right disclosure
• C.Special circumstance disclosure
• D.Security incident disclosure

Comment: *

Name: *

Email: *

Verification: *