Which of the following is a guiding best practice for implementing logical access controls?

• A.Implementing the Biba Integrity Model
• B.Access is granted on a least-privilege basis, per the organization's data owners
• C.Implementing the Take-Grant access control model
• D.Classifying data according to the subject's requirements

Comment: *

Name: *

Email: *

Verification: *

During an implementation review of a multiuser distributed application, an IS auditor finds minor weaknesses in three areas-the initial setting of parameters is improperly installed, weak passwords are being used and some vital reports are not being checked properly. While preparing the audit report, the IS auditor should:

• A.record the observations separately with the impact of each of them marked against each respective finding.
• B.advise the manager of probable risks without recording the observations, as the control weaknesses are minor ones.
• C.record the observations and the risk arising from the collective weaknesses.
• D.apprise the departmental heads concerned with each observation and properly document it in the report.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be the BEST criteria for monitoring an IT vendor's service levels?

• A.Service auditor's report
• B.Surprise visit to vendor
• C.Performance metrics
• D.Interview with vendor

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST enable effective IT resource management?

• A.Automating business processes
• B.Establishing business priorities
• C.Outsourcing IT processes and activities
• D.Assessing the risk associated with IT resources

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the best evidence of the adequacy of a security awareness program?

• A.The number of stakeholders including employees trained at various levels
• B.Coverage of training at all locations across the enterprise
• C.The implementation of security devices from different vendors
• D.Periodic reviews and comparison with best practices

Comment: *

Name: *

Email: *

Verification: *