When making an outsourcing decision, which of the following functions is MOST important to retain within the organization?

• A.Security governance
• B.Incident response
• C.Risk assessment
• D.Security management

Comment: *

Name: *

Email: *

Verification: *

An employee is found to be using an external cloud storage service to share corporate information with a third-party consultant, which is against company policy. Which of the following should be the information security manager's FIRST course of action?

• A.Seek business justification from the employee.
• B.Determine the classification level of the information.
• C.Block access to the cloud storage service.
• D.Inform higher management of a4 security breach.

Comment: *

Name: *

Email: *

Verification: *

Of the following, who should have PRIMARY responsibility for assessing the security risk associated with an outsourced cloud provider contract?

• A.Service delivery manager
• B.Compliance manager
• C.Chief information officer
• D.Information security manager

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY goal of an incident response team during a security incident?

• A.Minimize disruption to business-critical operations.
• B.Shut down the affected systems to limit the business impact.
• C.Maintain a documented chain of evidence.
• D.Ensure the attackers are detected and stopped.

Comment: *

Name: *

Email: *

Verification: *

When personal information is transmitted across networks, there MUST be adequate controls over:

• A.change management.
• B.privacy protection.
• C.consent to data transfer.
• D.encryption devices.

Comment: *

Name: *

Email: *

Verification: *