Multiple Choice
Scenario: You are the newly hired Chief Information Security Officer for a company that has not previously had a senior level security practitioner. The company lacks a defined security policy and framework for their Information Security Program. Your new boss, the Chief Financial Officer, has asked you to draft an outline of a security policy and recommend an industry/sector neutral information security control framework for implementation. Which of the following industry / sector neutral information security control frameworks should you recommend for implementation?
A) Payment Card Industry Digital Security Standard (PCI DSS)
B) National Institute of Standards and Technology (NIST) Special Publication 800-53
C) International Organization for Standardization - ISO 27001/2
D) British Standard 7799 (BS7799)
Correct Answer:
Verified
Correct Answer:
Verified
Q275: When investigating a potential e-mail crime, what
Q276: When a CISO considers delaying or not
Q277: The rate of change in technology increases
Q278: The exposure factor of a threat to
Q279: An organization's Information Security Policy is of
Q281: Which one of the following BEST describes
Q282: A CISO has recently joined an organization
Q283: Scenario: Most industries require compliance with multiple
Q284: Creating good security metrics is essential for
Q285: After undergoing an external IT audit, George