Which of the following provides the BEST means of ensuring business units outside of IT have their information security concerns addressed?

• A.Inclusion of business unit management In the Information security steering committee
• B.Involvement of senior management in information security policy development
• C.A comprehensive list of business processes performed by each business unit
• D.Targeted user security awareness programs for business units outside of IT

Comment: *

Name: *

Email: *

Verification: *

What is the BEST way to ensure that contract programmers comply with organizational security policies?

• A.Explicitly refer to contractors in the security standards
• B.Have the contractors acknowledge in writing the security policies
• C.Create penalties for noncompliance in the contracting agreement
• D.Perform periodic security reviews of the contractors

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST facilitates effective incident response testing?

• A.Including all business units in testing
• B.Reviewing test results quarterly
• C.Testing after major business changes
• D.Simulating realistic test scenarios

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to obtain support for a new organization-wide information security program?

• A.Deliver an information security awareness campaign.
• B.Publish an information security RACI chart.
• C.Benchmark against similar industry organizations.
• D.Establish an information security strategy committee.

Comment: *

Name: *

Email: *

Verification: *

The MOST important function of a risk management program is to:

• A.quantify overall risk.
• B.minimize residual risk.
• C.eliminate inherent risk.
• D.maximize the sum of all annualized loss expectancies (ALEs).

Comment: *

Name: *

Email: *

Verification: *