Which of the following is the MOST important requirement for setting up an information security infrastructure for a new system?

• A.Performing a business impact analysis (BIA)
• B.Considering personal information devices as pan of the security policy
• C.Initiating IT security training and familiarization
• D.Basing the information security infrastructure on risk assessment

Comment: *

Name: *

Email: *

Verification: *

The chief information security officer (CISO) has developed an information security strategy, but is struggling to obtain senior management commitment for funds to implement the strategy.
Which of the following is the MOST likely reason?

• A.The strategy does not include a cost-benefit analysis.
• B.There was a lack of engagement with the business during development.
• C.The strategy does not comply with security standards.
• D.The CISO reports to the CIO.

Comment: *

Name: *

Email: *

Verification: *

Which of the following terms and conditions represent a significant deficiency if included in a commercial hot site contract?

• A.A hot site facility will be shared in multiple disaster declarations
• B.All equipment is provided "at time of disaster, not on floor"
• C.The facility is subject to a "first-come, first-served" policy
• D.Equipment may be substituted with equivalent model

Comment: *

Name: *

Email: *

Verification: *

When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

• A.determine the impact if threats materialize.
• B.determine the sources of emerging threats.
• C.review historical threats within the industry.
• D.map threats to business assets.

Comment: *

Name: *

Email: *

Verification: *

The chief information security officer (ClSO) has developed an information security strategy, but is struggling to obtain senior management commitment for funds to implement the strategy Which of the following is the MOST likely reason?

• A.The strategy does not include a cost-benefit analysis
• B.The strategy does not comply with security standards
• C.The C1SO reports to the CIO.
• D.There was a lack of engagement with the business during development.

Comment: *

Name: *

Email: *

Verification: *