Which of the following is MOST relevant for an information security manager to communicate to the board of directors?

• A.The level of exposure
• B.The level of inherent risk
• C.Vulnerability assessments
• D.Threat assessments

Comment: *

Name: *

Email: *

Verification: *

Which resource is the MOST effective in preventing physical access tailgating/piggybacking?

• A.Card key door locks
• B.Photo identification
• C.Awareness training
• D.Biometric scanners

Comment: *

Name: *

Email: *

Verification: *

A risk management program should reduce risk to:

• A.zero.
• B.an acceptable level.
• C.an acceptable percent of revenue.
• D.an acceptable probability of occurrence.

Comment: *

Name: *

Email: *

Verification: *

Security risk assessments should cover only information assets that:

• A.are classified and labeled.
• B.have tangible value.
• C.support business processes.
• D.are inside the organization.

Comment: *

Name: *

Email: *

Verification: *

Which of the following will BEST ensure that management takes ownership of the decision making process for information security?

• A.Security policies and procedures
• B.Annual self-assessment by management
• C.Security-steering committees
• D.Security awareness campaigns

Comment: *

Name: *

Email: *

Verification: *