An information security manager mapping a job description to types of data access is MOST likely to adhere to
which of the following information security principles?

A security manager meeting the requirements for the international flow of personal data will need to ensure:

Which of the following factors is a PRIMARY driver for information security governance that does not require
any further justification?

Who is ultimately responsible for the organization’s information?

Which of the following is MOST important in developing a security strategy?

What is the PRIMARY role of the information security manager in the process of information classification
within an organization?

Who in an organization has the responsibility for classifying information?

An organization’s information security processes are currently defined as ad hoc. In seeking to improve their
performance level, the next step for the organization should be to:

When personal information is transmitted across networks, there MUST be adequate controls over:

The PRIMARY concern of an information security manager documenting a formal data retention policy wouldbe: