Exam 5: Fraud Prevention and Risk Management

Some of the Certified Information Systems Security Professionals criteria are; Access Control Systems & Methodology, Applications & Systems Development, Business Continuity Planning, Cryptography, Law, Investigation & Ethics, Operations Security.

The normal approach to penetration testing is to attempt to exploit all possible vulnerabilities.

Incident handling applies primarily to the check (continuous evaluation) phase in the _______ methodology.

What does a Gap Analysis focus on?

In regards to total destruction that occurs during a disaster, when does most of the damage occur?

If your process has reached maturity, and has achieved lower costs, shorter development times, higher quality, and higher productivity, then it must have:

Which of the following is not a layer of data protection?

The levels of Evaluation Assurance Levels do what for each other?

Which of the following best describes a Passive Threat?

Which of the following types of assets require protection according to the ISO standards?

Threats are systems-related individuals or events that can result in losses to the organization.

What is Federal Information Processing Standard 140 (FIPS 140) and what does it define?

The ISMS is a stand-alone process.

____________ are systems-related individuals or events that can result in losses to the organization.

An organizational internal control process that ensures confidentiality, integrity, and availability within the company is called:

What is supposed to happen under information security incident management?

The ISO "Family" that promulgates information security standards are:

What does the standard ISO 27002 highlight?

Process control means that the process produces results that are consistent and according to plans.

The assurance authority in a business would decide who to consult for assurances on deliverables.