When developing a risk management program, what is the FIRST activity to be performed?

• A.Threat assessment
• B.Classification of data
• C.Inventory of assets
• D.Criticality analysis

Comment: *

Name: *

Email: *

Verification: *

Proper segregation of duties does not prohibit a quality control administrator from also being responsible
for change control and problem management. True or false?

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Which of the following would a digital signature MOST likely prevent?

• A.Corruption
• B.Unauthorized change
• C.Repudiation
• D.Disclosure

Comment: *

Name: *

Email: *

Verification: *

An organization has a number of branches across a wide geographical area. To ensure that all aspects of the disaster recovery plan are evaluated in a cost effective manner, an IS auditor should recommend the use of a:

• A.data recovery test.
• B.full operational test.
• C.posttest.
• D.preparedness test.

Comment: *

Name: *

Email: *

Verification: *

An organization outsourced its IS functions to meet its responsibility for disaster recovery, the organization should:

• A.discontinue maintenance of the disaster recovery plan (DRP>
• B.coordinate disaster recovery administration with the outsourcing vendor
• C.delegate evaluation of disaster recovery to a third party
• D.delegate evaluation of disaster recovery to internal audit

Comment: *

Name: *

Email: *

Verification: *