An online payment provider's computer security incident response team has confirmed that a customer credit card database was breached. Which of the following is MOST important to include in a report to senior management?

• A.A summary of the security logs that illustrates the sequence of events
• B.An explanation of the potential business impact
• C.An analysis of similar attacks and recommended remediation
• D.A business case for implementing stronger logical access controls

Comment: *

Name: *

Email: *

Verification: *

During the response to a serious security breach, who is the BEST organizational staff member to communicate with external entities?

• A.The incident response team leader
• B.A dedicated public relations spokesperson
• C.The resource specified in the incident response plan
• D.The resource designated by senior management

Comment: *

Name: *

Email: *

Verification: *

When trying to integrate information security across an organization, the MOST important goal for a governing body should be to ensure:

• A.funding is approved for requested information security projects.
• B.the resources used for information security projects are kept to a minimum.
• C.information security is treated as a business critical issue.
• D.periodic information security audits are conducted.

Comment: *

Name: *

Email: *

Verification: *

The authorization to transfer the handling of an internal security incident
to a third-party support provider is PRIMARILY defined by the:

• A.chain of custody.
• B.information security manager.
• C.escalation procedures
• D.disaster recovery plan (DRP).

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be an information security manager's FIRST course of action when a newly introduced privacy regulation affects the business?

• A.Consult with IT staff and assess the risk based on their recommendations
• B.Update the security policy based on the regulatory requirements
• C.Propose relevant controls to ensure the business complies with the regulation
• D.Identify and assess the risk in the context of business objectives

Comment: *

Name: *

Email: *

Verification: *