To integrate security into system development fie cycle (SDLC) processes, an organization MUST ensure that security.

• A.Is a represented on the configuration control board.
• B.Is a prerequisite for complete of major phases
• C.Roles and responsibly have been defined
• D.Performance metrics have been met.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST effective way to increase security awareness in an organization?

• A.Include information security requirements in job descriptions.
• B.Require signed acknowledgment of information security policies.
• C.Implement regularly scheduled information security audits.
• D.Conduct periodic simulated phishing exercises.

Comment: *

Name: *

Email: *

Verification: *

Security policies should be aligned MOST closely with:

• A.industry' best practices.
• B.organizational needs.
• C.generally accepted standards.
• D.local laws and regulations.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST indication of a mature information security program?

• A.Security incidents are managed properly.
• B.Security resources are optimized.
• C.Security audit findings are reduced.
• D.Security spending is below budget.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST demonstrates that an anti-phishing campaign is effective?

• A.Improved staff attendance in awareness sessions
• B.Decreased number of phishing emails received
• C.Improved feedback on the anti-phishing campaign
• D.Decreased number of incidents that have occurred

Comment: *

Name: *

Email: *

Verification: *