Which of the following information BEST supports risk management decision making?

• A.Average cost of risk events
• B.Estimated savings resulting from reduced risk exposure
• C.Results of a vulnerability assessment
• D.Quantification of threats through threat modeling

Comment: *

Name: *

Email: *

Verification: *

A business previously accepted the risk associated with a zero-day vulnerability The same vulnerability was recently exploited in a high-profile attack on another organization m the same Industry Which of the following should be the information security manager's FIRST course of action?

• A.Develop best and worst case scenarios
• B.Reassess the risk in terms of likelihood and impact
• C.Report the breach of the other organization to senior management
• D.Evaluate the cost of remediating the vulnerability

Comment: *

Name: *

Email: *

Verification: *

Which of the following should include contact information for representatives of equipment and software vendors?

• A.Business impact analysis (BIA)
• B.Business continuity plan (BCP)
• C.Service level agreements (SLAs)
• D.Information security program charter

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an information security manager's MOST important course of action when responding to a major security incident that could disrupt the business?

• A.Follow the escalation process.
• B.Identify the indicators of compromise.
• C.Notify law enforcement.
• D.Contact forensic investigators.

Comment: *

Name: *

Email: *

Verification: *

Which of the following roles is MOST appropriate to determine access rights for specific users of an application?

• A.Data owner
• B.Data custodian
• C.System administrator
• D.Senior management

Comment: *

Name: *

Email: *

Verification: *