When an organization is implementing an information sec…
When an organization is implementing an information security governance program, its board of directors
should be responsible for:
Which of the following is the BEST method or technique …
Which of the following is the BEST method or technique to ensure the effective implementation of an
information security program?
The FIRST step to create an internal culture that focus…
The FIRST step to create an internal culture that focuses on information security is to:
Effective IT governance is BEST ensured by:
Effective IT governance is BEST ensured by:
which is the MOST critical security consideration?
The organization has decided to outsource the majority of the IT department with a vendor that is hosting
servers in a foreign country. Of the following, which is the MOST critical security consideration?
From an information security perspective, information t…
From an information security perspective, information that no longer supports the main purpose of the business
should be:
The data access requirements for an application should …
The data access requirements for an application should be determined by the:
Investment in security technology and processes should …
Investment in security technology and processes should be based on:
Which of the following is a benefit of information secu…
Which of the following is a benefit of information security governance?
Which of the following should be included in an annual …
Which of the following should be included in an annual information security budget that is submitted for
management approval?