The PRIMARY benefit of performing an information asset classification is to:

• A.link security requirements to business objectives.
• B.identify controls commensurate to risk.
• C.define access rights.
• D.establish ownership.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be done FIRST when selecting performance metrics to report on the vendor risk management process?

• A.Identify the intended audience.
• B.Identify the data owner.
• C.Select the data source
• D.Review the confidentiality requirements.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of an Internet usage policy is to prevent:

• A.access to inappropriate sites.
• B.downloading malicious code.
• C.violation of copyright laws.
• D.disruption of Internet access.

Comment: *

Name: *

Email: *

Verification: *

In assessing the degree to which an organization may be affected by new privacy legislation, information security management should FIRST:

• A.develop an operational plan for achieving compliance with the legislation.
• B.identify systems and processes that contain privacy components.
• C.restrict the collection of personal information until compliant.
• D.identify privacy legislation in other countries that may contain similar requirements.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST supports effective information security governance"*

• A.Compliance with regulations is demonstrated.
• B.A baseline risk assessment is performed.
• C.The information security manager develops the strategy
• D.A steering committee is established

Comment: *

Name: *

Email: *

Verification: *