The executive management of a domestic organization has announced plans to expand operations to multiple international locations. Which of the following should be the information security manager's FIRST step upon learning of these plans?

• A.Perform a gap analysis against international information security standards
• B.Update security training and awareness resources accordingly
• C.Research legal and regulatory requirements impacting the new locations
• D.Prepare localized information security policies for each new location

Comment: *

Name: *

Email: *

Verification: *

What is the BEST way to alleviate security team understaffing while retaining the capability in-house?

• A.Hire a contractor that would not be included in the permanent headcount
• B.Outsource with a security services provider while retaining the control internally
• C.Establish a virtual security team from competent employees across the company
• D.Provide cross training to minimize the existing resources gap

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST effective way to ensure the security of services and solutions delivered by third-party vendors?

• A.Integrate risk management into the vendor management process.
• B.Conduct security reviews on the services and solutions delivered.
• C.Review third-party contracts as part of the vendor management process.
• D.Perform an audit on vendors' security controls and practices.

Comment: *

Name: *

Email: *

Verification: *

An organization's research department plans to apply machine learning algorithms on a large data set containing customer names and purchase history. The risk leakage is considered high impact. Which of the following is the BEST risk treatment option in this situation?

• A.Mitigate the risk by encrypting the customer names in the data set.
• B.Mitigate the risk by applying anonymization on the data set.
• C.Transfer the risk by purchasing insurance.
• D.Accept the risk, as the benefits exceed the potential consequences.

Comment: *

Name: *

Email: *

Verification: *

Which is MOST important when aligning security priorities with business unit strategies?

• A.Stakeholder feedback
• B.Business impact analysis (BIA)
• C.Risk mitigation plans
• D.Gap analysis

Comment: *

Name: *

Email: *

Verification: *