An information security organization should PRIMARILY:

• A.support the business objectives of the company by providing security-related support services.
• B.be responsible for setting up and documenting the information security responsibilities of the information security team members.
• C.ensure that the information security policies of the company are in line with global best practices and standards.
• D.ensure that the information security expectations are conveyed to employees.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST help an information security manager prioritize remediation activities to meet regulatory requirements?

• A.A capability maturity model matrix
• B.Annual loss expectancy (ALE) of noncompliance
• C.Cost of associated controls
• D.Alignment with the IT strategy

Comment: *

Name: *

Email: *

Verification: *

When configuring a biometric access control system that protects a high-security data center, the system's sensitivity level should be set:

• A.to a higher false reject rate (FRR).
• B.to a lower crossover error rate.
• C.to a higher false acceptance rate (FAR).
• D.exactly to the crossover error rate.

Comment: *

Name: *

Email: *

Verification: *

From an information security perspective, legal issues associated with a transborder flow of technology- related items are MOST often

• A.website transactions and taxation.
• B.software patches and corporate date.
• C.encryption tools and personal data.
• D.lack of competition and free trade.

Comment: *

Name: *

Email: *

Verification: *

A data loss prevention (DLP) tool has flagged personally identifiable information (Pll) during transmission. Which of the following should the information security manager do FIRST?

• A.Initiate the incident response plan.
• B.Escalate the issue to senior management.
• C.Validate the scope and impact with the business process owner.
• D.Review and validate the rules within the DLP system.

Comment: *

Name: *

Email: *

Verification: *