The BEST way to ensure that information security policies are followed is to:

• A.distribute printed copies to all employees.
• B.perform periodic reviews for compliance.
• C.include escalating penalties for noncompliance.
• D.establish an anonymous hotline to report policy abuses.

Comment: *

Name: *

Email: *

Verification: *

Which of the following metrics BEST demonstrates the effectiveness of an organization's security awareness strategy?

• A.Trends in mean time to resolution of security incidents
• B.Pass rate of knowledge assessments completed after end user security training
• C.Percentage of end user computers and devices infected with malware
• D.Number of security incidents reported to the help desk

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important factor in an organization's selection of a key risk indicator (KRI)?

• A.Return on investment
• B.Organizational culture
• C.Compliance requirements
• D.Criticality of information

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of a risk management program is to:

• A.minimize inherent risk.
• B.eliminate business risk.
• C.implement effective controls.
• D.minimize residual risk.

Comment: *

Name: *

Email: *

Verification: *

For risk management purposes, the value of an asset should be based on:

• A.original cost.
• B.net cash flow.
• C.net present value.
• D.replacement cost.

Comment: *

Name: *

Email: *

Verification: *