Based on the information provided, which of the following situations presents the GREATEST information security risk for an organization with multiple, but small, domestic processing locations?

• A.Systems operation procedures are not enforced
• B.Change management procedures are poor
• C.Systems development is outsourced
• D.Systems capacity management is not performed

Comment: *

Name: *

Email: *

Verification: *

What is the MOST effective access control method to prevent users from sharing files with unauthorized users?

• A.Mandatory
• B.Discretionary
• C.Walled garden
• D.Role-based

Comment: *

Name: *

Email: *

Verification: *

What is the MAIN risk when there is no user management representation on the Information Security Steering Committee?

• A.Functional requirements are not adequately considered.
• B.User training programs may be inadequate.
• C.Budgets allocated to business units are not appropriate.
• D.Information security plans are not aligned with business requirements

Comment: *

Name: *

Email: *

Verification: *

An organization has purchased an Internet sales company to extend the sales department. The information security manager's FIRST step to ensure the security policy framework encompasses the new business model is to:

• A.perform a gap analysis.
• B.implement both companies' policies separately
• C.merge both companies' policies
• D.perform a vulnerability assessment

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST reason to separate short-term from long-term plans within an information security roadmap?

• A.To update the roadmap according to current risks
• B.To allow for reactive initiatives
• C.To facilitate business plan reporting to management
• D.To allocate resources for initiatives

Comment: *

Name: *

Email: *

Verification: *