Which of the following BEST facilitates the reporting of useful information about the effectiveness of the information security program?

• A.Risk heat map.
• B.Security benchmark report.
• C.Security metrics dashboard.
• D.Key risk indicators (KRIs).

Comment: *

Name: *

Email: *

Verification: *

Segregation of duties is a security control PRIMARILY used to:

• A.limit malicious behavior.
• B.establish hierarchy.
• C.decentralize operations.
• D.establish dual check.

Comment: *

Name: *

Email: *

Verification: *

A regulatory compliance issue has been identified in a critical business application, but remediating the issue would significantly impact business operations. What information would BEST enable senior management to make an informed decision?

• A.Costs associated with compensating controls
• B.Industry benchmarks and best practices
• C.Risk assessment results and recommendations
• D.Impact analysis and treatment option

Comment: *

Name: *

Email: *

Verification: *

An organization finds unauthorized software has been installed on a number of workstations. The software was found to contain a Trojan which had been uploading data to an unknown external party. Which of the following would have BEST prevented the installation of the unauthorized software?

• A.Banning executable file downloads at the Internet firewall
• B.Removing local administrator rights
• C.Implementing application blacklisting
• D.Implementing an intrusion detection system (IDS)

Comment: *

Name: *

Email: *

Verification: *

Security technologies should be selected PRIMARILY on the basis of their:

• A.ability to mitigate business risks.
• B.evaluations in trade publications.
• C.use of new and emerging technologies.
• D.benefits in comparison to their costs.

Comment: *

Name: *

Email: *

Verification: *