When developing a new application, which of the following is the BEST approach to ensure compliance with security requirements?

• A.Perform a security gap analysis.
• B.Prepare detailed acceptance criteria
• C.Provide security training for developers.
• D.Adhere to change management processes.

Comment: *

Name: *

Email: *

Verification: *

When developing an incident response plan, the information security manager should:

• A.include response scenarios that have been approved previously by business management.
• B.determine recovery time objectives (RTOs).
• C.allow IT to decide which systems can be removed from the infrastructure.
• D.require IT to invoke the business continuity plan.

Comment: *

Name: *

Email: *

Verification: *

Which of the following has the highest priority when defining an emergency response plan?

• A.Critical data
• B.Critical infrastructure
• C.Safety of personnel
• D.Vital records

Comment: *

Name: *

Email: *

Verification: *

To ensure that payroll systems continue on in an event of a hurricane hitting a data center, what would be the FIRS T crucial step an information security manager would take in ensuring business continuity planning?

• A.Conducting a qualitative and quantitative risk analysis.
• B.Assigning value to the assets.
• C.Weighing the cost of implementing the plan vs. financial loss.
• D.Conducting a business impact analysis (BIA).

Comment: *

Name: *

Email: *

Verification: *

A security review identifies that confidential information on the file server has been accessed by unauthorized users in following should the information security manager do FIRST?

• A.Remove access to the information.
• B.Invoke the incident response plan.
• C.Delete the information from the file server.
• D.Implement role-based access control.

Comment: *

Name: *

Email: *

Verification: *