QUESTION: 45

Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

They are subjective and can be completed more quickly
They are objective and express risk / cost in approximates
They are subjective and can express risk / cost in real numbers
They are objective and can express risk / cost in real numbers

Answer(s): D

Reveal Solution Next Question

QUESTION: 46

Which of the following most commonly falls within the scope of an information security governance steering committee?

Vetting information security policies
Approving access to critical financial systems
Interviewing candidates for information security specialist positions
Developing content for security awareness programs

Answer(s): A

Reveal Solution Next Question

A company wants to fill a Chief Information Security Officer position in the organization. They need to define and implement a more holistic security program.

Which of the following qualifications and experience would be MOST desirable to find in a candidate?