An information security organization should PRIMARILY:

To ensure that payroll systems continue on in an event of a hurricane hitting a data center, what would be the
FIRS T crucial step an information security manager would take in ensuring business continuity planning?

Which of the following is the MOST effective way to treat a risk such as a natural disaster that has a low
probability and a high impact level?

A risk management approach to information protection is:

After obtaining commitment from senior management, which of the following should be completed NEXT when
establishing an information security program?

The MOST effective use of a risk register is to:

Which of the following is the BEST method to ensure the overall effectiveness of a risk management program?

When performing a qualitative risk analysis, which of the following will BEST produce reliable results?

An organization is already certified to an international security standard. Which mechanism would BEST help to
further align the organization with other data security regulatory requirements as per new business needs?

The PRIMARY reason for assigning classes of sensitivity and criticality to information resources is to provide a
basis for: