Which of the following standard organizations promulgates worldwide proprietary industrial and commercial standards?

Which of the following is the capability to correct flows in the existing functionality without affecting other components of the system?

Which of the following are the purposes of the Cost-benefit analysis process? Each correct answer represents a complete solution. Choose two.

Which of the following types of Incident Response Teams (IRT) is responsible for a logical or physical segment of the infrastructure, usually of a large organization or one that is geographically dispersed?

Risk assessment helps in determining the extent of potential threats and risks associated with an IT system throughout its SDLC. Which of the following steps covered by the risk assessment methodology?

Each correct answer represents a complete solution. Choose three.

Which of the following is a log that contains records of login/logout activity or other security-related events specified by the systems audit policy?

Which of the following is used to provide for the systematic review, retention and destruction of documents received or created in the course of business?

Which of the following elements are essential elements of a privacy policy? Each correct answer represents a complete solution. Choose two.

Mark works as a Network Security Administrator for uCertify Inc. The organization is using an intranet to distribute information to its employees. A database residing on the network contains employees’ information, such as employee name, designation, department, phone extension, date of birth, date of joining, etc. He is concerned about the security because the database has all information about employees, which can help an unauthorized person to recognize an individual.

Which Personally Identifiable Information should be removed from the database so that the unauthorized person cannot identify an individual?

Which of the following is a written document and is used in those cases where parties do not imply a legal commitment or in those situations where the parties are unable to create a legally enforceable agreement?