Who should determine data access requirements for an application hosted at an organization's data center?

• A.Systems administrator
• B.Data custodian
• C.Information security manager
• D.Business owner

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be determined FIRST when preparing a risk communication plan?

• A.Reporting frequency
• B.Communication channel
• C.Target audience
• D.Reporting content

Comment: *

Name: *

Email: *

Verification: *

The purpose of a corrective control is to:

• A.reduce adverse events.
• B.indicate compromise.
• C.mitigate impact.
• D.ensure compliance.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST mitigate identified vulnerabilities in a timely manner?

• A.Continuous vulnerability monitoring tool
• B.Categorization of the vulnerabilities based on system's criticality
• C.Monitoring of key risk indicators (KRIs)
• D.Action plan with responsibilities and deadlines

Comment: *

Name: *

Email: *

Verification: *

Which of the following metrics would BEST monitor how well information security requirements are incorporated into the change management process?

• A.Unauthorized changes in the environment
• B.Information security related changes
• C.Information security incidents caused due to unauthorized changes
• D.Denied changes due to insufficient security details

Comment: *

Name: *

Email: *

Verification: *