READ Free Dumps For
Warning: Undefined variable $vendor in /home1/bandbozu/getfreedumps.com/quiz.php on line 141
-
Warning: Undefined variable $exam_number in /home1/bandbozu/getfreedumps.com/quiz.php on line 141
| Question ID 16863 | Which of the following individuals would be in the BEST position to sponsor the creation of
an information security steering group?
|
| Option A | Information security manager
|
| Option B | Chief operating officer (COO)
|
| Option C | Internal auditor
|
| Option D | Legal counsel
|
| Correct Answer | B |
Explanation Explanation: The chief operating officer (COO) is highly-placed within an organization and has the most knowledge of business operations and objectives. The chief internal auditor and chief legal counsel are appropriate members of such a steering group. However, sponsoring the creation of the steering committee should be initiated by someone versed in the strategy and direction of the business. Since a security manager is looking to this group for direction, they are not in the best position to oversee formation of this group.
| Question ID 16864 | The chief information security officer (CISO) should ideally have a direct reporting
relationship to the:
|
| Option A | head of internal audit.
|
| Option B | chief operations officer (COO).
|
| Option C | chief technology officer (CTO).
|
| Option D | legal counsel.
|
| Correct Answer | B |
Explanation Explanation: The chief information security officer (CISO) should ideally report to as high a level within the organization as possible. Among the choices given, the chief operations officer (COO) would have not only the appropriate level but also the knowledge of day-to-day operations. The head of internal audit and legal counsel would make good secondary choices, although they would not be as knowledgeable of the operations. Reporting to the chief technology officer (CTO) could become problematic as the CTO's goals for the infrastructure might, at times, run counter to the goals of information security.