A couple of years ago you started your company which has now grown from 1 to 20 employees.
Your company’s information is worth more and more and gone are the days when you could keep
it all in hand yourself. You are aware that you have to take measures, but what should they be?
You hire a consultant who advises you to start with a qualitative risk analysis. What is a qualitative
risk analysis?

Susan sends an email to Paul. Who determines the meaning and the value of information in this
email?

Which measure assures that valuable information is not left out available for the taking?

What is an example of a good physical security measure?

You read in the newspapers that the ex-employee of a large company systematically deleted files
out of revenge on his manager. Recovering these files caused great losses in time and money.
What is this kind of threat called?

Which is a legislative or regulatory act related to information security that can be imposed upon all
organizations?

You are the first to arrive at work in the morning and notice that the CD ROM on which you saved
contracts yesterday has disappeared. You were the last to leave yesterday. When should you
report this information security incident?

A Dutch company requests to be listed on the American Stock Exchange. Which legislation within
the scope of information security is relevant in this case?

You own a small company in a remote industrial area. Lately, the alarm regularly goes off in the
middle of the night. It takes quite a bit of time to respond to it and it seems to be a false alarm
every time. You decide to set up a hidden camera. What is such a measure called?

At Midwest Insurance, all information is classified. What is the goal of this classification of
information?