Exam 14: Information Security

BCP shortcomings recently identified during crises include:

Which of the following is a typical statement included in an organization's acceptable use policy?

Electronic Records management (ERM)practices became a more important information security management issue in the U.S.in 2006 when new legislation established new rules for timely information gathering in response to potential litigation.

Putting plans in place to ensure that employees and business processes can continue when faced with any major unanticipated disruption is called:

What effect does The PATRIOT Act passed by Congress have on the U.S.government's ability to access an individual's personal information?

Primary sources of thefts of intellectual property rights,trade secrets,and research and development knowledge are employees.

Hackers can be differentiated from crackers by:

Which organizational position is directly responsible for the balancing of an organization's security risks with the costs to avoid them?

The Sarbanes-Oxley act requires officers of publicly traded companies in the U.S.to certify that:

Why is it difficult for companies to manage their e-mail on their own private subnets?

Research has shown that an organization's inability to return to normal business activities after a major disruption is a key predictor of:

What are some of the benefits to organizations with written privacy policies?

What is the best term to describe those who break into computers to steal information,wipe out hard drives,or do others harm?

The goal of the IS manager responsible for information security is to eliminate all information risk.

What are some means to deal with key information security management issues?

A denial of service attack is implemented by simultaneously sending a large number of messages to a target computer to create a computer or communications overload,so that legitimate users cannot obtain access.

Which of the following is not one of the common policy areas generally included in an information security policy?

Which of the following is one of the areas in which controls are assessed by auditors using the COSO framework?

Creating a BCP in the U.S.requires:

A worm is a virus that has the ability to copy itself from machine to machine,usually over a network.