Security awareness training should be provided to new employees:

• A.on an as-needed basis.
• B.during system user training.
• C.before they have access to data.
• D.along with department staff.

Comment: *

Name: *

Email: *

Verification: *

The MOST appropriate owner of customer data stored in a central database, used only by an organization's sales department, would be the:

• A.sales department.
• B.database administrator.
• C.chief information officer (CIO).
• D.head of the sales department.

Comment: *

Name: *

Email: *

Verification: *

After implementing an information security governance framework, which of the following would provide the BEST information to develop an information security project plan?

• A.Risk heat map
• B.Balanced scorecard
• C.Gap analysis
• D.Recent audit results

Comment: *

Name: *

Email: *

Verification: *

Segregation of duties is a security control PRIMARILY used to:

• A.establish dual check.
• B.establish hierarchy.
• C.limit malicious behavior.
• D.decentralize operations.

Comment: *

Name: *

Email: *

Verification: *

In business critical applications, where shared access to elevated privileges by a small group is necessary, the BEST approach to implement adequate segregation of duties is to:

• A.ensure access to individual functions can be granted to individual users only.
• B.implement role-based access control in the application.
• C.enforce manual procedures ensuring separation of conflicting duties.
• D.create service accounts that can only be used by authorized team members.

Comment: *

Name: *

Email: *

Verification: *