Which of the following BEST demonstrates return on investment (ROI) for an information security initiative?

• A.Business case
• B.Risk heat map
• C.Information security program roadmap
• D.Business impact analysis (BIA)

Comment: *

Name: *

Email: *

Verification: *

A global organization has developed a strategy to share a customer information database between offices in two countries. In this situation, it is MOST important to ensure:

• A.a nondisclosure agreement is signed.
• B.data sharing complies with local laws and regulations at both locations.
• C.data is encrypted in tram* and at rest
• D.risk coverage is split between the two locations sharing data.

Comment: *

Name: *

Email: *

Verification: *

Executive leadership becomes involved in decisions about information security governance.
Executive leadership views information security governance primarily as a concern of the information security management team. What should be an information security manager's MOST important consideration when reviewing a proposed upgrade to a business unit's production database?

• A.Ensuring senior management is aware of associated risk
• B.Ensuring residual risk is within appetite
• C.Ensuring a cost-benefit analysis is completed
• D.Ensuring the application inventory is updated

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST relevant for an information security manager to communicate to business units?

• A.Threat assessments
• B.Vulnerability assessments
• C.Risk ownership
• D.Business impact analysis (BIA)

Comment: *

Name: *

Email: *

Verification: *

Which of the following has the MOST direct impact on the usability of an organization's asset classification program?

• A.The granularity of classifications in the hierarchy
• B.The frequency of updates to the organization's risk register
• C.The business objectives of the organization
• D.The support of senior management for the classification scheme

Comment: *

Name: *

Email: *

Verification: *