An organization experienced a breach which was successfully contained and remediated. Based on industry regulations, the breach needs to be communicated externally. What should the information security manager do NEXT?

• A.Refer to the incident response plan.
• B.Send out a breach notification to all parties involved.
• C.Contact the board of directors.
• D.Invoke the corporate communications plan.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST facilitates the reporting of useful information about the effectiveness of the information security program?

• A.Risk heat map.
• B.Security metrics dashboard.
• C.Key risk indicators (KRIs).
• D.Security benchmark report.

Comment: *

Name: *

Email: *

Verification: *

Of the following, retention of business records should be PRIMARILY based on:

• A.periodic vulnerability assessment.
• B.regulatory and legal requirements.
• C.device storage capacity and longevity.
• D.past litigation.

Comment: *

Name: *

Email: *

Verification: *

Which of the following has the highest priority when defining an emergency response plan?

• A.Critical data
• B.Critical infrastructure
• C.Safety of personnel
• D.Vital records

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST important driver when developing an effective information security strategy?

• A.Compliance requirements
• B.Information security standards
• C.Security audit reports
• D.Benchmarking reports

Comment: *

Name: *

Email: *

Verification: *