Some organizations have information protection policies that place the burden of information protection on managers in individual organizational units. An information protection policy may include:
Answer(s): D
A sound data classification scheme sets the foundation for the effective implementation of access control to ensure that data is adequately protected. The elements of a data classification scheme are as follows EXCEPT:
Answer(s): C,D
Information technology general controls set the foundation for effective control over computerized information system assets. General controls apply to the entire computer operation. Which of the following is/are NOT out of these controls?
System tailoring is accomplished by setting optional system parameters and, therefore, has an impact on system performance and security. Control techniques for system's software include:
Answer(s): A,C,D
Feasibility studies and cost benefit analysis Approval process for initiating system development and implementation of systems that are developed Change control procedures for new system developments and modifications to existing systems to ensure that only authorized changes are moved to production General and detailed design specification Project review, including periodic milestones reviews and post-implementation reviews Contracting procedures that include the requirements for describing expected project deliverables such as system components and source codes, project timeframes, estimated hours, and the maximum allowable expenses for each phase These are some of the standards of:
Answer(s): A
Post your Comments and Discuss Financial CFSA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CFSA content, but please register or login to continue.