Jill is establishing a companywide sales program that will require different user groups with different privileges to access information on a centralized database. How should the security manager secure the database?

A number of factors should be considered when assigning values to assets. Which of the following is not used to determine the value of an asset?

There are several methods an intruder can use to gain access to company assets. Which of the following best describes masquerading?

The integrity of data is not related to which of the following?

Sue has been tasked with implementing a number of security controls, including antivirus and antispam software, to protect the company’s e-mail system. What type of approach is her company taking to handle the risk posed by the system?

Assigning data classification levels can help with all of the following except:

Which of the following is not included in a risk assessment?

As head of sales, Jim is the information owner for the sales department. Which of the following is not Jim’s responsibility as information owner?

Steve, a department manager, has been asked to join a committee that is responsible for defining an acceptable level of risk for the organization, reviewing risk assessment and audit reports, and approving significant changes to security policies and programs. What committee is he joining?

Global organizations that transfer data across international boundaries must abide by guidelines and transborder information flow rules developed by an international organization that helps different governments come together and tackle the economic, social, and governance challenges of a globalized economy. What organization is this?