QUESTION: 57

Which of the following is MOST important when dealing with an Information Security Steering committee?

Ensure that security policies and procedures have been vetted and approved.
Review all past audit and compliance reports.
Include a mix of members from different departments and staff levels.
Be briefed about new trends and products at each meeting by a vendor.

Answer(s): B

Reveal Solution Next Question

QUESTION: 58

Risk that remains after risk mitigation is known as_____________.

Accepted risk
Residual risk
Non-tolerated risk
Persistent risk

Answer(s): B

Reveal Solution Next Question

An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System.

Which of the following international standards can BEST assist this organization?

Payment Card Industry Data Security Standards (PCI-DSS)
International Organization for Standardizations – 27005 (ISO-27005)
International Organization for Standardizations – 27004 (ISO-27004)
Control Objectives for Information Technology (COBIT)

Answer(s): C

Reveal Solution Next Question

QUESTION: 60

When would it be more desirable to develop a set of decentralized security policies and procedures within an enterprise environment?

When there is a variety of technologies deployed in the infrastructure.
When it results in an overall lower cost of operating the security program.
When there is a need to develop a more unified incident response capability.
When the enterprise is made up of many business units with diverse business activities, risks profiles and regulatory requirements.

Answer(s): D

Reveal Solution Next Question

Free 712-50 Exam Braindumps (page: 15)

QUESTION: 57

QUESTION: 58

QUESTION: 59

QUESTION: 60