Multiple Choice
Scenario: A Chief Information Security Officer (CISO) recently had a third party conduct an audit of the security program. Internal policies and international standards were used as audit baselines. The audit report was presented to the CISO and a variety of high, medium and low rated gaps were identified. The CISO has implemented remediation activities. Which of the following is the MOST logical next step?
A) Validate the effectiveness of applied controls
B) Report the audit findings and remediation status to business stake holders
C) Validate security program resource requirements
D) Review security procedures to determine if they need modified according to findings
Correct Answer:
Verified
Correct Answer:
Verified
Q14: Microsoft Outlook maintains email messages in a
Q15: A newly appointed security officer finds data
Q16: As the new CISO at the company
Q17: An employee successfully avoids becoming a victim
Q18: Scenario: Your organization employs single sign-on (user
Q20: According to ISO 27001, of the steps
Q21: You are a security analyst performing a
Q22: To make sure the evidence you recover
Q23: The organization does not have the time
Q24: What is the first thing that needs