To integrate security into system development life cycle (SDLC) processes, an organization MUST ensure that security:

• A.is a prerequisite for completion of major phases.
• B.is represented on the configuration control board.
• C.performance metrics have been met
• D.roles and responsibilities have been defined.

Comment: *

Name: *

Email: *

Verification: *

Who should determine the appropriate classification of accounting ledger data located on a database server and maintained by a database administrator in the IT department?

• A.Database administrator (DBA)
• B.Finance department management
• C.Information security manager
• D.IT department management

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to consider when developing a business case to support the investment in an information security program?

• A.Senior management support
• B.Results of a cost-benefit analysis
• C.Results of a risk assessment
• D.Impact on the risk profile

Comment: *

Name: *

Email: *

Verification: *

Executive leadership has decided to engage a consulting firm to develop and implement a comprehensive security framework for the organization to allow senior management to remain focused on business priorities. Which of the following poses the GREATEST challenge to the successful implementation of the new security governance framework?

• A.Information security management does not fully accept the responsibility for information security governance.
• B.Executive leadership views information security governance
• C.Executive leadership becomes involved in decisions about information security governance.

Comment: *

Name: *

Email: *

Verification: *

An information security manager notes that security incidents are not being appropriately escalated by the help desk after tickets are logged.
Which of the following is the BEST automated control to resolve this issue?

• A.Implementing automated vulnerability scanning in the help desk workflow
• B.Integrating incident response workflow into the help desk ticketing system
• C.Changing the default setting for all security incidents to the highest priority
• D.Integrating automated service level agreement (SLA) reporting into the help desk ticketing system

Comment: *

Name: *

Email: *

Verification: *