Which of the following are the principles of access controls?
Each correct answer represents a complete solution. Choose three.

• A.Confidentiality
• B.Availability
• C.Reliability
• D.Integrity

Correct Answer: A,B,D

Explanation/Reference:
Explanation:
The principles of access controls focus on availability, integrity, and confidentiality, as loss or danger is directly related to these three:
Loss of confidentiality- Someone sees a password or a company's secret formula, this is referred to as

loss of confidentiality.
Loss of integrity- An e-mail message is modified in transit, a virus infects a file, or someone makes

unauthorized changes to a Web site is referred to as loss of integrity.
Loss of availability- An e-mail server is down and no one has e-mail access, or a file server is down so

data files aren't available comes under loss of availability.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY objective of providing an aggregated view of IT risk to business management?

• A.To identify dependencies for reporting risk
• B.To enable consistent data on risk to be obtained
• C.To provide consistent and clear terminology
• D.To allow for proper review of risk tolerance

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST comprehensive resource for prioritizing the implementation of information systems controls?

• A.Data classification policy
• B.The risk register
• C.The IT strategic plan
• D.Emerging technology trends

Comment: *

Name: *

Email: *

Verification: *

Which of the following role carriers is accounted for analyzing risks, maintaining risk profile, and risk-aware decisions?

• A.Business management
• B.Business process owner
• C.Chief information officer (CIO)
• D.Chief risk officer (CRO)

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the principles of risk management?
Each correct answer represents a complete solution. Choose three.

• A.Risk management should be an integral part of the organization
• B.Risk management should be a part of decision-making
• C.Risk management is the responsibility of executive management
• D.Risk management should be transparent and inclusive

Comment: *

Name: *

Email: *

Verification: *