The PRIMARY focus of a training curriculum for members of an incident response team should be:

• A.security awareness
• B.specific role training,
• C.external corporate communication
• D.technology training.

Comment: *

Name: *

Email: *

Verification: *

The MOST important success factor to design an effective IT security awareness program is to:

• A.customize the content to the target audience.
• B.ensure senior management is represented.
• C.ensure that all the staff is trained.
• D.avoid technical content but give concrete examples.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST critical to the successful implementation of information security within an organizational?

• A.The information security manager is responsible for setting information security policy
• B.Strong risk management skills exist within the information security group
• C.Budget is allocated for information security tools
• D.Security is effectively marketed to all managers and employees

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST effective way to help ensure web developers understand the growing severity of web application security risks?

• A.Incorporate security requirements into job descriptions
• B.Integrate security into the early phases of the development life cycle
• C.Implement a tailored security awareness training program
• D.Standardize secure web development practices

Comment: *

Name: *

Email: *

Verification: *

Which of the following are seldom changed in response to technological changes?

• A.Standards
• B.Procedures
• C.Policies
• D.Guidelines

Comment: *

Name: *

Email: *

Verification: *