The FIRST step to create an internal culture that focuses on information security is to:

Effective IT governance is BEST ensured by:

The organization has decided to outsource the majority of the IT department with a vendor that is hosting
servers in a foreign country. Of the following, which is the MOST critical security consideration?

From an information security perspective, information that no longer supports the main purpose of the business
should be:

The data access requirements for an application should be determined by the:

Investment in security technology and processes should be based on:

Which of the following is a benefit of information security governance?

Which of the following should be included in an annual information security budget that is submitted for
management approval?

An organization’s information security strategy should be based on:

An IS manager has decided to implement a security system to monitor access to the Internet and prevent access to numerous sites. Immediately upon installation, employees Hood the IT helpdesk with complaints of being unable to perform business functions on Internet sites. This is an example of: