QUESTION: 89

As the new CISO at the company you are reviewing the audit reporting process and notice that it includes only detailed technical diagrams.

What else should be in the reporting process?

Names and phone numbers of those who conducted the audit
Executive summary
Penetration test agreement
Business charter

Answer(s): B

Reveal Solution Next Question

QUESTION: 90

Which of the following provides an audit framework?

Control Objectives for IT (COBIT)
International Organization Standard (ISO) 27002
Payment Card Industry –Data Security Standard (PCI-DSS)
National Institute of Standards and technology (NIST) SP 800-30

Answer(s): A

Reveal Solution Next Question

QUESTION: 91

Which of the following is used to establish and maintain a framework to provide assurance that information security strategies are aligned with organizational objectives?

Governance
Compliance
Awareness
Management

Answer(s): A

Reveal Solution Next Question

QUESTION: 92

Which of the following is the MOST important goal of risk management?

Finding economic balance between the impact of the risk and the cost of the control
Identifying the victim of any potential exploits
Identifying the risk
Assessing the impact of potential threats

Answer(s): A

Reveal Solution Next Question

Free 712-50 Exam Braindumps (page: 23)

QUESTION: 89

QUESTION: 90

QUESTION: 91

QUESTION: 92