QUESTION: 21

Which of the following statutory requirements are likely to be of relevance to all organisations no matter which sector nor geographical location they operate in?

Sarbanes-Oxley.
GDPR.
HIPAA.
FSA.

Answer(s): D

Reveal Solution Next Question

QUESTION: 22

Which of the following is NOT a valid statement to include in an organisation's security policy?

The policy has the support of Board and the Chief Executive.
The policy has been agreed and amended to suit all third party contractors.
How the organisation will manage information assurance.
The compliance with legal and regulatory obligations.

Answer(s): C

Reveal Solution Next Question

QUESTION: 23

In order to better improve the security culture within an organisation with a top down approach, which of the following actions at board level is the MOST effective?

Appointment of a Chief Information Security Officer (CISO).
Purchasing all senior executives personal firewalls.
Adopting an organisation wide "clear desk" policy.
Developing a security awareness e-learning course.

Answer(s): A

Reveal Solution Next Question

QUESTION: 24

What form of risk assessment is MOST LIKELY to provide objective support for a security Return on Investment case?

ISO/IEC 27001.
Qualitative.
CPNI.
Quantitative

Answer(s): D

Reveal Solution Next Question

Free CISMP-V9 Exam Braindumps (page: 7)

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

CISMP-V9 Exam Discussions & Posts