QUESTION: 37 Exam Topic: 1, Governance, Risk, Compliance

Which of the following is MOST important when dealing with an Information Security Steering committee:

Include a mix of members from different departments and staff levels.
Ensure that security policies and procedures have been vetted and approved.
Review all past audit and compliance reports.
Be briefed about new trends and products at each meeting by a vendor.

Answer(s): C

QUESTION: 38 Exam Topic: 1, Governance, Risk, Compliance

A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards.
What immediate action should the information security manager take?

Enforce the existing security standards and do not allow the deployment of the new technology.
Amend the standard to permit the deployment.
If the risks associated with that technology are not already identified, perform a risk analysis to quantify the risk, and allow the business unit to proceed based on the identified risk level.
Permit a 90-day window to see if an issue occurs and then amend the standard if there are no issues.

Answer(s): C

Reveal Solution Next Question