Which of the following factors is a PRIMARY driver for information security governance that does not require any further justification?

• A.Alignment with industry best practices
• B.Business continuity investment
• C.Business benefits
• D.Regulatory compliance

Comment: *

Name: *

Email: *

Verification: *

When performing a qualitative risk analysis, which of the following will BEST produce reliable results?

• A.Estimated productivity losses
• B.Possible scenarios with threats and impacts
• C.Value of information assets
• D.Vulnerability assessment

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important when conducting a forensic investigation?

• A.Documenting analysis steps
• B.Capturing full system images
• C.Maintaining a chain of custody
• D.Analyzing system memory

Comment: *

Name: *

Email: *

Verification: *

The MOST important component of a privacy policy is:

• A.notifications.
• B.warranties.
• C.liabilities.
• D.geographic coverage.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be MOST helpful when justifying the funding required for a compensating control?

• A.Business case
• B.Risk analysis
• C.Business impact analysis
• D.Threat assessment

Comment: *

Name: *

Email: *

Verification: *