A review of an organization s controls has determined its data loss prevention {DLP) system is currently failing to detect outgoing emails containing credit card data. Which of the following would be MOST impacted?

• A.Key risk indicators (KRls)
• B.Risk appetite
• C.Residual risk
• D.Inherent risk

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements BEST describes policy?

• A.A minimum threshold of information security controls that must be implemented
• B.A checklist of steps that must be completed to ensure information security
• C.An overall statement of information security scope and direction
• D.A technology-dependent statement of best practices

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements BEST describes policy?

• A.A minimum threshold of information security controls that must be implemented
• B.A checklist of steps that must be completed to ensure information security
• C.An overall statement of information security scope and direction
• D.A technology-dependent statement of best practices
• E.Explanation:
  A policy is an executive mandate which helps in identifying a topic that contains particular risks to avoid or prevent. Policies are high-level documents signed by a person of high authority with the power to force cooperation. The policy is a simple document stating that a particular high-level control objective is important to the organization's success. Policies are usually only one page in length. The authority of the person mandating a policy will determine the scope of implementation. Hence in other words, policy is an overall statement of information security scope and direction.

Comment: *

Name: *

Email: *

Verification: *

You are the project manager for GHT project. You need to perform the Qualitative risk analysis process.
When you have completed this process, you will produce all of the following as part of the risk register update output except which one?

• A.Probability of achieving time and cost estimates
• B.Priority list of risks
• C.Watch list of low-priority risks
• D.Risks grouped by categories

Comment: *

Name: *

Email: *

Verification: *

Which section of the Sarbanes-Oxley Act specifies "Periodic financial reports must be certified by CEO and CFO"?

• A.Section 302
• B.Section 404
• C.Section 203
• D.Section 409
• E.Explanation:
  Section 302 of the Sarbanes-Oxley Act requires corporate responsibility for financial reports to be
  certified by CEO, CFO, or designated representative.
• F.is incorrect. Section 203 of the Sarbanes-Oxley Act requires audit partners and review
  partners to rotate off an assignment every five years.
• G.is incorrect. Section 409 of the Sarbanes-Oxley Act states that the financial reports
  must be distributed quickly and currently.

Comment: *

Name: *

Email: *

Verification: *