QUESTION: 21

Ensuring that the actions of a set of people, applications and systems follow the organization’s rules is BEST described as:

Compliance management
Security management
Risk management
Mitigation management

Answer(s): A

Reveal Solution Next Question

QUESTION: 22

Which of the following international standards can be BEST used to define a Risk Management process in an organization?

International Organization for Standardizations – 27005 (ISO-27005)
National Institute for Standards and Technology 800-50 (NIST 800-50)
Payment Card Industry Data Security Standards (PCI-DSS)
International Organization for Standardizations – 27004 (ISO-27004)

Answer(s): A

Reveal Solution Next Question

A security professional has been promoted to be the CISO of an organization. The first task is to create a security policy for this organization. The CISO creates and publishes the security policy.

This policy, however, is ignored and not enforced consistently. Which of the following is the MOST likely reason for the policy shortcomings?

Lack of a formal risk management policy
Lack of a formal security policy governance process
Lack of formal definition of roles and responsibilities
Lack of a formal security awareness program

Answer(s): B

Reveal Solution Next Question

QUESTION: 24

Regulatory requirements typically force organizations to implement_____________.

Financial controls
Mandatory controls
Discretionary controls
Optional controls

Answer(s): B

Reveal Solution Next Question

Free 712-50 Exam Braindumps (page: 7)

QUESTION: 21

QUESTION: 22

QUESTION: 23

QUESTION: 24

712-50 Exam Discussions & Posts