Question 1

An information security deliverable, information security management system and enterprise risk management are generally a part of a companies:

Accepted Answer

A)  Internal Controls. 
B)  External Controls. 
C)  Detective Controls. 
D)  Preventative Controls. 
A)  Internal Controls. 
B)  External Controls. 
C)  Detective Controls. 
D)  Preventative Controls.

Question 2

When developing an ISMS, how many phases are there?

Accepted Answer

A)  3. 
B)  4. 
C)  5. 
D)  6. 
A)  3. 
B)  4. 
C)  5. 
D)  6.

Question 3

Assessing risks involves:

Accepted Answer

A)  Threat analysis. 
B)  Vulnerability analysis. 
C)  Risk analysis. 
D)  Both a and 
A)  Threat analysis. 
B)  Vulnerability analysis. 
C)  Risk analysis. 
D)  Both a and

Question 4

Who is/are the International Standard Organization (ISO)?

Accepted Answer

A)  A group of Forensic Accountants who develop internal control standards. 
B)  A membership organization for Information Security Managers. 
C)  An international group that promulgates standards relating to business processes. 
D)  A U.S. Governmental organization similar to the SEC that regulates computer fraud and information security. 
A)  A group of Forensic Accountants who develop internal control standards. 
B)  A membership organization for Information Security Managers. 
C)  An international group that promulgates standards relating to business processes. 
D)  A U.S. Governmental organization similar to the SEC that regulates computer fraud and information security.

Question 5

How is Information Security Assurance achieved?

Accepted Answer

Information Security Assurance

Question 6

The formal written disaster management and recovery plan should name one person within the organization as what?

Accepted Answer

A)  Emergency response director. 
B)  Data recovery officer. 
C)  Chief information officer. 
D)  Emergency recovery specialist. 
A)  Emergency response director. 
B)  Data recovery officer. 
C)  Chief information officer. 
D)  Emergency recovery specialist.

Question 7

Which of the following best describes and Active Threat?

Accepted Answer

A)  A flood destroying the Accounts Payable files. 
B)  A hacker destroying the Accounts Payable files. 
C)  A fire destroys the Accounts Payable files. 
D)  A computer malfunction destroying the Accounts Payable files. 
A)  A flood destroying the Accounts Payable files. 
B)  A hacker destroying the Accounts Payable files. 
C)  A fire destroys the Accounts Payable files. 
D)  A computer malfunction destroying the Accounts Payable files.

Question 8

The Certified Information Systems Security Professionals (CISSP) tests what?

Accepted Answer

A)  Individuals. 
B)  Organizations. 
C)  Processes. 
D)  Systems. 
A)  Individuals. 
B)  Organizations. 
C)  Processes. 
D)  Systems.

Question 9

Explain how the ISO promulgates standards in "families" and what that means.

Accepted Answer

Thus far, the ISO has promulgated over 1

Question 10

How many increasing levels of Evaluation Assurance Levels (EALs) are there?

Accepted Answer

A)  1. 
B)  3. 
C)  5. 
D)  7. 
A)  1. 
B)  3. 
C)  5. 
D)  7.

Question 11

How could Information security assurance (ISA) be implemented at your businesses or college?

Accepted Answer

Information security assurance (ISA) ref

Question 12

Which of the following are levels of access security level within a corporation?

Accepted Answer

A)  Unclassified, Shared, Company Only, Confidential. 
B)  Unclassified and classified. 
C)  Unclassified, Secret, Top Secret and Eyes Only. 
D)  Public, private and executive. 
A)  Unclassified, Shared, Company Only, Confidential. 
B)  Unclassified and classified. 
C)  Unclassified, Secret, Top Secret and Eyes Only. 
D)  Public, private and executive.

Question 13

What are forms of assurance come for information security?

Accepted Answer

A)  Informal or Semi-formal. 
B)  Formal Certification by an Accredited Certification Body. 
C)  Self Certification. 
D)  All of the above. 
A)  Informal or Semi-formal. 
B)  Formal Certification by an Accredited Certification Body. 
C)  Self Certification. 
D)  All of the above.

Question 14

Describe the ISMS Life Cycle and PDCA.

Accepted Answer

The development of the ISMS should proce

Question 15

What are the three options when dealing with Risk Management?

Accepted Answer

A)  Accept the risk, Resolve the risk, Counteract the risk. 
B)  Ignore the risk, Insure the risk, Write policies against the risk. 
C)  Accept the risk, Insure the risk, Implement controls against the risk. 
D)  Accept the risk, Insure the risk, Admonish employees who cause the risk. 
A)  Accept the risk, Resolve the risk, Counteract the risk. 
B)  Ignore the risk, Insure the risk, Write policies against the risk. 
C)  Accept the risk, Insure the risk, Implement controls against the risk. 
D)  Accept the risk, Insure the risk, Admonish employees who cause the risk.

Question 16

Who developed Trusted Product Evaluation Program (TPEP)?

Accepted Answer

A)  NASa. 
B)  NSA. 
C)  CIA. 
D)  FBI. 
A)  NASa. 
B)  NSA. 
C)  CIA. 
D)  FBI.

Question 17

Who are some types of individuals posing active and passive threats?

Accepted Answer

Computer Systems Personnel. This group o

Question 18

Single security standards, even when properly implemented, generally do not lead to complete security assurances in terms of all assessment approaches and life-cycle phases.

Accepted Answer

A) True 
 B)False

Question 19

Compare and contrast Trusted Product Evaluation Program (TPEP) and the Trust Technology Assessment Program (TTAP).

Accepted Answer

TPEP was a National Security Agency prog

Question 20

How can an organization have some type evidence-based assertion that increases one's certainty that a security-related deliverable can withstand specified security threats?

Accepted Answer

A)  Through Risk Analysis Matrix. 
B)  Through Information security assurance (IS
A) . 
C)  Through Internal Controls. 
D)  Through hiring hackers to test the system. 
A)  Through Risk Analysis Matrix. 
B)  Through Information security assurance (IS
A) . 
C)  Through Internal Controls. 
D)  Through hiring hackers to test the system.

An information security deliverable, information security management system and enterprise risk management are generally a part of a companies:

When developing an ISMS, how many phases are there?

Assessing risks involves:

Who is/are the International Standard Organization (ISO)?

How is Information Security Assurance achieved?

The formal written disaster management and recovery plan should name one person within the organization as what?

Which of the following best describes and Active Threat?

The Certified Information Systems Security Professionals (CISSP) tests what?

Explain how the ISO promulgates standards in "families" and what that means.

How many increasing levels of Evaluation Assurance Levels (EALs) are there?

How could Information security assurance (ISA) be implemented at your businesses or college?

Which of the following are levels of access security level within a corporation?

What are forms of assurance come for information security?

Describe the ISMS Life Cycle and PDCA.

What are the three options when dealing with Risk Management?

Who developed Trusted Product Evaluation Program (TPEP)?

Who are some types of individuals posing active and passive threats?

Single security standards, even when properly implemented, generally do not lead to complete security assurances in terms of all assessment approaches and life-cycle phases.

Compare and contrast Trusted Product Evaluation Program (TPEP) and the Trust Technology Assessment Program (TTAP).

How can an organization have some type evidence-based assertion that increases one's certainty that a security-related deliverable can withstand specified security threats?

Introduction to Forensic Accounting and Fraud Examination

The Forensic Accounting Legal Environment

Fundamentals I: Accounting Information Systems

Fundamentals II: The Auditing Environment

Fraud Detection

The Fraud Investigation and Engagement Processes

The Evidence Collection Process

Fraud Examination Evidence I: Physical, Documentary, and Observational Evidence

Fraud Examination Evidence II: Interview and Interrogation Methods

Fraud Examination Evidence III: Forensic Science and Computer Forensics

The Fraud Report, Litigation, and the Recovery Process

Employee, Vendor, and Other Frauds Against the Organization

Financial Statement Fraud

Fraud and Sox Compliance

Tax Fraud

Bankruptcy, Divorce, Identity Theft

Organized Crime, Counterterrorism, and Anti-Money Laundering

Business Valuation

Dispute Resolution Services

Filters

Exam 5: Fraud Prevention and Risk Management

An information security deliverable, information security management system and enterprise risk management are generally a part of a companies:

When developing an ISMS, how many phases are there?

Assessing risks involves:

Who is/are the International Standard Organization (ISO)?

How is Information Security Assurance achieved?

The formal written disaster management and recovery plan should name one person within the organization as what?

Which of the following best describes and Active Threat?

The Certified Information Systems Security Professionals (CISSP) tests what?

Explain how the ISO promulgates standards in "families" and what that means.

How many increasing levels of Evaluation Assurance Levels (EALs) are there?

How could Information security assurance (ISA) be implemented at your businesses or college?

Which of the following are levels of access security level within a corporation?

What are forms of assurance come for information security?

Describe the ISMS Life Cycle and PDCA.

What are the three options when dealing with Risk Management?

Who developed Trusted Product Evaluation Program (TPEP)?

Who are some types of individuals posing active and passive threats?

Single security standards, even when properly implemented, generally do not lead to complete security assurances in terms of all assessment approaches and life-cycle phases.

Compare and contrast Trusted Product Evaluation Program (TPEP) and the Trust Technology Assessment Program (TTAP).

How can an organization have some type evidence-based assertion that increases one's certainty that a security-related deliverable can withstand specified security threats?

Introduction to Forensic Accounting and Fraud Examination

The Forensic Accounting Legal Environment

Fundamentals I: Accounting Information Systems

Fundamentals II: The Auditing Environment

Fraud Detection

The Fraud Investigation and Engagement Processes

The Evidence Collection Process

Fraud Examination Evidence I: Physical, Documentary, and Observational Evidence

Fraud Examination Evidence II: Interview and Interrogation Methods

Fraud Examination Evidence III: Forensic Science and Computer Forensics

The Fraud Report, Litigation, and the Recovery Process

Employee, Vendor, and Other Frauds Against the Organization

Financial Statement Fraud

Fraud and Sox Compliance

Tax Fraud

Bankruptcy, Divorce, Identity Theft

Organized Crime, Counterterrorism, and Anti-Money Laundering

Business Valuation

Dispute Resolution Services

Filters