Based on the information provided, which of the following situations presents the GREATEST information security risk for an organization with multiple, but small, domestic processing locations?

• A.Systems operation procedures are not enforced
• B.Change management procedures are poor
• C.Systems development is outsourced
• D.Systems capacity management is not performed

Comment: *

Name: *

Email: *

Verification: *

In implementing information security governance, the information security manager is PRIMARILY responsible for:

• A.developing the security strategy.
• B.reviewing the security strategy.
• C.communicating the security strategy.
• D.approving the security strategy

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST method to protect consumer private information for an online public website?

• A.Use secure encrypted transport layer.
• B.Apply a masking policy to the consumer data.
• C.Apply strong authentication to online account
• D.Encrypt consumer's data in transit and at rest.

Comment: *

Name: *

Email: *

Verification: *

A security manager is preparing a report to obtain the commitment of executive management to a security program. Inclusion of which of the following would be of MOST value?

• A.Examples of genuine incidents at similar organizations
• B.Statement of generally accepted best practices
• C.Associating realistic threats to corporate objectives
• D.Analysis of current technological exposures

Comment: *

Name: *

Email: *

Verification: *

There are concerns that security events are not reported to management in a timely manner. To address this situation which of the following is MOST important to review?

• A.The incident response plan
• B.Control ownership
• C.The security event log
• D.Key risk indicators (KRls)

Comment: *

Name: *

Email: *

Verification: *