QUESTION: 149 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following is considered to be an IT governance framework and a supporting toolset that allows for managers to bridge the gap between control requirements, technical issues, and business risks?

Control Objective for Information Technology (COBIT)
Committee of Sponsoring Organizations (COSO)
Payment Card Industry (PCI)
Information Technology Infrastructure Library (ITIL)

Answer(s): A

Reveal Solution Next Question

QUESTION: 150 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following set of processes is considered to be one of the cornerstone cycles of the International Organization for Standardization (ISO) 27001 standard?

Plan-Check-Do-Act
Plan-Do-Check-Act
Plan-Select-Implement-Evaluate
SCORE (Security Consensus Operational Readiness Evaluation)

Answer(s): B

Reveal Solution Next Question

QUESTION: 151 Exam Topic: 2, Information Security Controls and Audit Management

Which of the following best describes the purpose of the International Organization for Standardization (ISO) 27002 standard?

To give information security management recommendations to those who are responsible for initiating, implementing, or maintaining security in their organization.
To provide a common basis for developing organizational security standards
To provide effective security management practice and to provide confidence in inter- organizational dealings
To established guidelines and general principles for initiating, implementing, maintaining, and improving information security management within an organization

Answer(s): D

Reveal Solution Next Question

QUESTION: 152 Exam Topic: 2, Information Security Controls and Audit Management

Providing oversight of a comprehensive information security program for the entire organization is the primary responsibility of which group under the InfoSec governance framework?

Senior Executives
Office of the Auditor
Office of the General Counsel
All employees and users

Answer(s): A

Reveal Solution Next Question

Free 512-50 Exam Braindumps (page: 39)

QUESTION: 149 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 150 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 151 Exam Topic: 2, Information Security Controls and Audit Management

QUESTION: 152 Exam Topic: 2, Information Security Controls and Audit Management

512-50 Discussions & Posts