Information security projects should be prioritized on the basis of:

• A.time required for implementation.
• B.impact on the organization.
• C.total cost for implementation.
• D.mix of resources required.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST likely to affect an organization's ability to respond to security incidents in a timely manner?

• A.Misconfiguration of security information and event management (SIEM) tool
• B.Complexity of network segmentation
• C.Lack of senior management buy-in
• D.Inadequate detective control performance

Comment: *

Name: *

Email: *

Verification: *

To achieve effective strategic alignment of security initiatives, it is important that:

• A.Steering committee leadership be selected by rotation.
• B.Inputs be obtained and consensus achieved between the major organizational units.
• C.The business strategy be updated periodically.
• D.Procedures and standards be approved by all departmental heads.

Comment: *

Name: *

Email: *

Verification: *

To achieve effective strategic alignment of security initiatives, it is important that:

• A.Steering committee leadership be selected by rotation.
• B.Inputs be obtained and consensus achieved between the major organizational units.
• C.The business strategy be updated periodically.
• D.Procedures and standards be approved by all departmental heads.

Comment: *

Name: *

Email: *

Verification: *

Reviewing which of the following would BEST ensure that security controls are effective?

• A.Risk assessment policies
• B.Return on security investment
• C.Security metrics
• D.User access rights

Comment: *

Name: *

Email: *

Verification: *