Who does the security auditor report to?

Besides risk management and risk mitigation, what other factor is used to perform effective risk management?

Mary has been tasked with preliminary planning for a security program. Which of the following would not be within her task scope?

What is the chief security responsibility of a data owner?

Which of the following is not a factor in determining the sensitivity of data?

Which of the following is not a reason why data should be classified?

A company was charged with negligence. The judge ruled that while the company produced evidence of good security policies, the company was still guilty of breach of privacy due to lack of enforcement of the security policies. Which of the following management principles was violated?

The operations manager has established that prior to building a server, the employee must first check the inventory to make sure that all the spare parts needed are available, they must sign out those parts, and follow a checklist, finally signing and dating it when done. What has the operations manager created?

The operations manager has established the use of uniform checklists for all server maintenance. What has the operations manager done?

What is the relationship between policies and standards?