After the implementation of Internet of Things (IoT) devices, new risk scenarios were identified. What is the PRIMARY reason to report this information to risk owners?A . To reevaluate continued use of IoT devices.B...
An information security manager at a global organization that is subject to regulation by multiple governmental jurisdictions with differing requirements should:A . bring all locations into conformity with the aggregate requirements of all governmental...
Which of the following is the BEST way to facilitate the alignment between an organization’s information security program and business objectives?A . Information security is considered at the feasibility stage of all IT projects.B...
Which of the following is the MOST important factor when designing information security architecture?A . Technical platform interfacesB . Scalability of the networkC . Development methodologiesD . Stakeholder requirementsView AnswerAnswer: D Explanation: The most...
After implementing an information security governance framework, which of the following would provide the BEST information to develop an information security project plan?A . Risk heat mapB . Recent audit resultsC . Balanced scorecardD...
Which of the following aspects are included in the Internal Environment Framework of COSO ERM? Each correct answer represents a complete solution. Choose three.A . Enterprise's integrity and ethical valuesB . Enterprise's working environmentC...
Implementing which of the following controls would BEST reduce the impact of a vulnerability that has been exploited?A . Preventive controlB . Deterrent controlC . Corrective controlD . Detective controlView AnswerAnswer: C
Which of the following BEST indicates the condition of a risk management program?A . Number of controls.B . Amount of residual risk.C . Number of risk register entries.D . Level of financial support.View AnswerAnswer:...
A database was compromised by guessing the password for a shared administrative account and confidential customer information was stolen. The information security manager was able to detect this breach by analyzing which of the...
Which of the following would provide the MOST essential input for the development of an information security strategy?A . Measurement of security performance against IT goalsB . Results of an information security gap analysisC...
