An information security manager has been tasked with developing materials to update the board, regulatory agencies, and the media about a security incident. Which of the following should the information security manager do FIRST?

• A.Invoke the organization's incident response plan.
• B.Create a comprehensive singular communication.
• C.Set up communication channels for the target audience.
• D.Determine the needs and requirements of each audience.

Comment: *

Name: *

Email: *

Verification: *

An organization wants to integrate information security into its human resource management processes. Which of the following should be the FIRST step?

• A.Identify information security risk associated with the processes.
• B.Assess the business objectives of the processes.
• C.Evaluate the cost of information security integration.
• D.Benchmark the processes with best practice to identify gaps.

Comment: *

Name: *

Email: *

Verification: *

When collecting evidence for forensic analysis, it is important to:

• A.ensure the assignment of qualified personnel.
• B.request the IT department do an image copy.
• C.disconnect from the network and isolate the affected devices.
• D.ensure law enforcement personnel are present before the forensic analysis commences.

Comment: *

Name: *

Email: *

Verification: *

After obtaining commitment from senior management, which of the following should be completed NEXT when establishing an information security program?

• A.Define security metrics
• B.Conduct a risk assessment
• C.Perform a gap analysis
• D.Procure security tools

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to achieve compliance with new global regulations related to the protection of personal information?

• A.Review contracts and statements of work (SOWs) with vendors.
• B.Implement data regionalization controls.
• C.Execute a risk treatment plan.
• D.Determine current and desired state of controls.

Comment: *

Name: *

Email: *

Verification: *