Many times a CISO may have to speak to the Board of Directors (BOD) about their cyber security posture. What would be the BEST choice of security metrics to present to the BOD?
An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator. The most appropriate course of action for the IT auditor is to:
When you develop your audit remediation plan what is the MOST important criteria?
Which of the following are necessary to formulate responses to external audit findings?
Who is responsible for verifying that audit directives are implemented?
Which of the following is a benefit of a risk-based approach to audit planning?
Assigning the role and responsibility of Information Assurance to a dedicated and independent security group is an example of:
Providing oversight of a comprehensive information security program for the entire organization is the primary responsibility of which group under the InfoSec governance framework?
The MOST common method to get an unbiased measurement of the effectiveness of an Information Security Management System (ISMS) is to
Which of the following BEST describes an international standard framework that is based on the security model Information Technology—Code of Practice for Information Security Management?
