QUESTION: 145 Exam Topic: 2, Information Security Controls and Audit Management

The effectiveness of an audit is measured by?

The number of actionable items in the recommendations
How it exposes the risk tolerance of the company
How the recommendations directly support the goals of the company
The number of security controls the company has in use

Answer(s): C

QUESTION: 146 Exam Topic: 2, Information Security Controls and Audit Management

A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old. After reading it, what should be the CISO's FIRST priority?

Have internal audit conduct another audit to see what has changed.
Contract with an external audit company to conduct an unbiased audit
Review the recommendations and follow up to see if audit implemented the changes
Meet with audit team to determine a timeline for corrections

Answer(s): C

Reveal Solution Next Question

QUESTION: 147 Exam Topic: 2, Information Security Controls and Audit Management

You have implemented the new controls.
What is the next step?

Document the process for the stakeholders
Monitor the effectiveness of the controls
Update the audit findings report
Perform a risk assessment

Answer(s): B

Reveal Solution Next Question

QUESTION: 148 Exam Topic: 2, Information Security Controls and Audit Management

An audit was conducted and many critical applications were found to have no disaster recovery plans in place. You conduct a Business Impact Analysis (BIA) to determine impact to the company for each application.
What should be the NEXT step?

Determine the annual loss expectancy (ALE)
Create a crisis management plan
Create technology recovery plans
Build a secondary hot site

Answer(s): C

Reveal Solution Next Question

Free 512-50 Exam Braindumps (page: 38)

QUESTION: 145 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 146 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 147 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 148 Exam Topic: 2, Information Security Controls and Audit Management

512-50 Discussions & Posts