QUESTION: 165

Which of the following is the BEST way to align security and business strategies?

Include security risk as part of corporate risk management.
Develop a balanced scorecard for security.
Establish key performance indicators (KPIs) for business through security processes.
Integrate information security governance into corporate governance.

Answer(s): C

Show Answer Next Question

QUESTION: 166

When developing an information security governance framework, which of the following should be the FIRSTactivity?

Integrate security within the system’s development life-cycle process.
Align the information security program with the organization’s other risk and control activities.
Develop policies and procedures to support the framework.
Develop response measures to detect and ensure the closure of security breaches.

Answer(s): B

Show Answer Next Question

QUESTION: 167

Which of the following is the MOST effective way for senior management to support the integration of information security governance into corporate governance?

Develop the information security strategy based on the enterprise strategy.
Appoint a business manager as heard of information security.
Promote organization-wide information security awareness campaigns.
Establish a steering committee with representation from across the organization.

Answer(s): A

Show Answer Next Question