There are several methods an intruder can use to gain access to company assets. Which of the following best describes masquerading?

The integrity of data is not related to which of the following?

Sue has been tasked with implementing a number of security controls, including antivirus and antispam software, to protect the company’s e-mail system. What type of approach is her company taking to handle the risk posed by the system?

Assigning data classification levels can help with all of the following except:

Which of the following is not included in a risk assessment?

As head of sales, Jim is the information owner for the sales department. Which of the following is not Jim’s responsibility as information owner?

Steve, a department manager, has been asked to join a committee that is responsible for defining an acceptable level of risk for the organization, reviewing risk assessment and audit reports, and approving significant changes to security policies and programs. What committee is he joining?

Global organizations that transfer data across international boundaries must abide by guidelines and transborder information flow rules developed by an international organization that helps different governments come together and tackle the economic, social, and governance challenges of a globalized economy. What organization is this?

Jane has been charged with ensuring that clients’ personal health information is adequately protected before it is exchanged with a new European partner. What data security requirements must she adhere to?

False-positives are primarily a concern during: