QUESTION: 121 Exam Topic: 2, Information Security Controls and Audit Management

As the new CISO at the company you are reviewing the audit reporting process and notice that it includes only detailed technical diagrams.
What else should be in the reporting process?

Executive summary
Penetration test agreement
Names and phone numbers of those who conducted the audit
Business charter

Answer(s): A

Reveal Solution Next Question

QUESTION: 122 Exam Topic: 2, Information Security Controls and Audit Management

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader.
What should you do?

Nothing, this falls outside your area of influence.
Close and chain the door shut and send a company-wide memo banning the practice.
Have a risk assessment performed.
Post a guard at the door to maintain physical security

Answer(s): C

Reveal Solution Next Question

QUESTION: 123 Exam Topic: 2, Information Security Controls and Audit Management

Assigning the role and responsibility of Information Assurance to a dedicated and independent security group is an example of:

Detective Controls
Proactive Controls
Preemptive Controls
Organizational Controls

Answer(s): D

Reveal Solution Next Question

QUESTION: 124 Exam Topic: 2, Information Security Controls and Audit Management

The CIO of an organization has decided to assign the responsibility of internal IT audit to the IT team.
This is consider a bad practice MAINLY because

The IT team is not familiar in IT audit practices
This represents a bad implementation of the Least Privilege principle
This represents a conflict of interest
The IT team is not certified to perform audits

Answer(s): C

Reveal Solution Next Question

Free 512-50 Exam Braindumps (page: 32)

QUESTION: 121 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 122 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 123 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 124 Exam Topic: 2, Information Security Controls and Audit Management

512-50 Discussions & Posts