The risk associated with an asset after controls are applied can be expressed as:

• A.a function of the likelihood and impact.
• B.a function of the cost and effectiveness of controls.
• C.the likelihood of a given threat.
• D.the magnitude of an impact.

Comment: *

Name: *

Email: *

Verification: *

Which of the following assets are the examples of intangible assets of an enterprise?
Each correct answer represents a complete solution. Choose two.

• A.Customer trust
• B.Information
• C.People
• D.Infrastructure

Comment: *

Name: *

Email: *

Verification: *

A payroll manager discovers that fields in certain payroll reports have been modified without authorization. Which of the following control weaknesses could have contributed MOST to this problem?

• A.The programmer did not involve the user in testing.
• B.Payroll files were not under the control of a librarian.
• C.The user requirements were not documented.
• D.The programmer had access to the production programs.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to determine whether new controls mitigate security gaps in a business system?

• A.Conduct a compliance check against standards.
• B.Perform a vulnerability assessment.
• C.Measure the change in inherent risk.
• D.Complete an offsite business continuity exercise.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the HIGHEST risk of a policy that inadequately defines data and system ownership?

• A.User management coordination does not exist
• B.Audit recommendations may not be implemented
• C.Users may have unauthorized access to originate, modify or delete data
• D.Specific user accountability cannot be established

Comment: *

Name: *

Email: *

Verification: *