Temporarily deactivating some monitoring processes, even if supported by an acceptance of
operational risk, may not be acceptable to the information security manager if:

An outcome of effective security governance is:

How would an information security manager balance the potentially conflicting requirements of an
international organization’s security standards and local regulation?

Who should drive the risk analysis for an organization?

The FIRST step in developing an information security management program is to:

Which of the following is the MOST important to keep in mind when assessing the value of
information?

What would a security manager PRIMARILY utilize when proposing the implementation of a
security solution?

To justify its ongoing security budget, which of the following would be of MOST use to the
information security’ department?

Which of the following situations would MOST inhibit the effective implementation of security
governance:

To achieve effective strategic alignment of security initiatives, it is important that: