QUESTION: 17

When managing an Information Security Program, which of the following is of MOST importance in order to influence the culture of an organization?

Compliance with local privacy regulations
An independent Governance, Risk and Compliance organization
Support Legal and HR teams
Alignment of security goals with business goals

Answer(s): D

Reveal Solution Next Question

QUESTION: 18

The FIRST step in establishing a security governance program is to?

Obtain senior level sponsorship
Conduct a workshop for all end users.
Conduct a risk assessment.
Prepare a security budget.

Answer(s): A

Reveal Solution Next Question

QUESTION: 19

When an organization claims it is secure because it is PCI-DSS certified, what is a good first question to ask towards assessing the effectiveness of their security program?

How many credit records are stored?
What is the value of the assets at risk?
What is the scope of the certification?
How many servers do you have?

Answer(s): C

Reveal Solution Next Question

QUESTION: 20

A security manager has created a risk program. Which of the following is a critical part of ensuring the program is successful?

Ensuring developers include risk control comments in code
Creating risk assessment templates based on specific threats
Providing a risk program governance structure
Allowing for the acceptance of risk for regulatory compliance requirements

Answer(s): C

Reveal Solution Next Question

Free 712-50 Exam Braindumps (page: 5)

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20