Which of the following is the BEST way to improve the timely reporting of information security incidents?

• A.Perform periodic simulations with the incident response team.
• B.Incorporate security procedures in help desk processes
• C.Regularly reassess and update the incident response plan.
• D.Integrate an intrusion detection system (IDS) in the DMZ

Comment: *

Name: *

Email: *

Verification: *

A regulatory compliance issue has been identified in a critical business application, but remediating the issue would significantly impact business operations. What information would BEST enable senior management to make an informed decision?

• A.Impact analysis and treatment option
• B.Industry benchmarks and best practices
• C.Costs associated with compensating controls
• D.Risk assessment results and recommendations

Comment: *

Name: *

Email: *

Verification: *

Which of the following functions is critical when initiating the removal of system access for terminated employees?

• A.Legal
• B.Help desk
• C.Human resources
• D.Information security

Comment: *

Name: *

Email: *

Verification: *

When application-level security controlled by business process owners is found to be poorly managed, which of the following could BEST improve current practices?

• A.Centralizing security management
• B.Implementing sanctions for noncompliance
• C.Policy enforcement by IT management
• D.Periodic compliance reviews

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important consideration when developing information security objectives?

• A.They are approved by the IT governance function.
• B.They are identified using global security frameworks and standards.
• C.They are regularly reassessed and reported to stakeholders.
• D.They are clear and can be understood by stakeholders.

Comment: *

Name: *

Email: *

Verification: *