QUESTION: 321

An information security manager has been asked to create a strategy to protect the organization’s information from a variety of threat vectors. Which of the following should be done FIRST?

Perform a threat modeling exercise
Develop a risk profile
Design risk management processes
Select a governance framework

Answer(s): B

Show Answer Next Question

QUESTION: 322

Which of the following would BEST ensure that security risk assessment is integrated into the life cycle of major IT projects?

Integrating the risk assessment into the internal audit program
Applying global security standards to the IT projects
Training project managers on risk assessment
Having the information security manager participate on the project setting committees

Answer(s): B

Show Answer Next Question