The MOST effective way to communicate the level of impact of information security risks on organizational objectives is to present

• A.risk treatment options.
• B.detailed threat analysis results.
• C.a risk heat map.
• D.business impact analysis (BIA) results.

Comment: *

Name: *

Email: *

Verification: *

An information security manager has researched several options for handling ongoing security concerns and will be presenting these solutions to business managers. Which of the following with BEST enable business managers to make an informed decision?

• A.Risk analysis
• B.Cost-benefit analysis
• C.Business impact analysis (BIA)
• D.Gap analysis

Comment: *

Name: *

Email: *

Verification: *

In which of the following ways can an information security manager BEST ensure that security controls are adequate for supporting business goals and objectives?

• A.Enforcing strict disciplinary procedures in case of noncompliance
• B.Reviewing results of the annual company external audit
• C.Using the risk management process
• D.Adopting internationally accepted controls

Comment: *

Name: *

Email: *

Verification: *

An information security team is investigating an alleged breach of an organization's network. Which of the following would be the BEST single source of evidence to review?

• A.Intrusion detection system (IDS)
• B.File integrity monitoring (FIM) software.
• C.Security information and event management (SIEM) tool
• D.Antivirus software

Comment: *

Name: *

Email: *

Verification: *

An IT department is evaluating a new cloud backup service to support the human resources (HR) department.
Which of the following is the information security manager's MOST important action prior to contract execution?

• A.Evaluate the cloud vendor's information security program.
• B.Complete a compliance risk assessment.
• C.Review the risk with HR executives.
• D.Ensure HR data is encrypted prior to sending it to the cloud vendor.

Comment: *

Name: *

Email: *

Verification: *