When of the following is the BEST key control indicator (KCI) to determine the effectiveness of en intrusion prevention system (IPS)?

• A.Total number of threats identified
• B.Percentage of system uptime
• C.Percentage of relevant threats mitigated
• D.Reaction time of the system to threats

Comment: *

Name: *

Email: *

Verification: *

The risk associated with data loss from a website which contains sensitive customer information is BEST owned by:

• A.the business process owner
• B.the compliance manager
• C.the third-party website manager
• D.IT security

Comment: *

Name: *

Email: *

Verification: *

An IT department has organized training sessions to improve user awareness of organizational information security policies. Which of the following is the BEST key performance indicator (KPI) to reflect effectiveness of the training?

• A.Number of training sessions completes
• B.Percentage of staff members who complete the training with a passing score
• C.Percentage of attendees versus total staff
• D.Percentage of staff members who attend the training with positive feedback

Comment: *

Name: *

Email: *

Verification: *

An organization has engaged a third party to provide an Internet gateway encryption service that protects sensitive data uploaded to a cloud service. This is an example of risk:

• A.transfer
• B.acceptance
• C.mitigation
• D.avoidance

Comment: *

Name: *

Email: *

Verification: *

Which of the following approaches BEST identifies information systems control deficiencies?

• A.Countermeasures analysis
• B.Risk assessment
• C.Best practice assessment
• D.Gap analysis

Comment: *

Name: *

Email: *

Verification: *