READ Free Dumps For
Warning: Undefined variable $vendor in /home1/bandbozu/getfreedumps.com/quiz.php on line 141
-
Warning: Undefined variable $exam_number in /home1/bandbozu/getfreedumps.com/quiz.php on line 141

Question ID 16901	When an organization is implementing an information security governance program, its board of directors should be responsible for:
Option A	drafting information security policies.
Option B	reviewing training and awareness programs.
Option C	setting the strategic direction of the program.
Option D	auditing for compliance.
Correct Answer	C

Explanation Explanation: A board of directors should establish the strategic direction of the program to ensure that it is in sync with the company's vision and business goals. The board must incorporate the governance program into the overall corporate business strategy. Drafting information security policies is best fulfilled by someone such as a security manager with the expertise to bring balance, scope and focus to the policies. Reviewing training and awareness programs may best be handled by security management and training staff to ensure that the training is on point and follows best practices. Auditing for compliance is best left to the internal and external auditors to provide an objective review of the program and how it meets regulatory and statutory compliance.

Question ID 16902	Information security projects should be prioritized on the basis of:
Option A	time required for implementation.
Option B	impact on the organization.
Option C	total cost for implementation.
Option D	mix of resources required.
Correct Answer	B

Explanation Explanation: Information security projects should be assessed on the basis of the positive impact that they will have on the organization. Time, cost and resource issues should be subordinate to this objective.

Previous-Page 1 2. . . 45 46 47 48 49 50 51. . . 76 77 Next-Page

Send email to admin@getfreedumps for new dumps request!!!