The PRIMARY reason for defining the information security roles and responsibilities of staff throughout an organization is to:

• A.comply with security policy
• B.reinforce the need for training
• C.increase corporate accountability
• D.enforce individual accountability

Comment: *

Name: *

Email: *

Verification: *

When designing an information security quarterly report to management, the MOST important element to be considered should be the:

• A.information security metrics.
• B.knowledge required to analyze each issue.
• C.linkage to business area objectives.
• D.baseline against which metrics are evaluated.

Comment: *

Name: *

Email: *

Verification: *

Which of the following terms and conditions represent a significant deficiency if included in a commercial hot site contract?

• A.A hot site facility will be shared in multiple disaster declarations
• B.All equipment is provided "at time of disaster, not on floor"
• C.The facility is subject to a "first-come, first-served" policy
• D.Equipment may be substituted with equivalent model

Comment: *

Name: *

Email: *

Verification: *

A computer incident response team (CIRT) manual should PRIMARILY contain which of the following documents?

• A.Risk assessment results
• B.Severity criteria
• C.Emergency call tree directory
• D.Table of critical backup files

Comment: *

Name: *

Email: *

Verification: *

What will have the HIGHEST impact on standard information security governance models?

• A.Number of employees
• B.Distance between physical locations
• C.Complexity of organizational structure
• D.Organizational budget

Comment: *

Name: *

Email: *

Verification: *