READ Free Dumps For
Warning: Undefined variable $vendor in /home1/bandbozu/getfreedumps.com/quiz.php on line 141
-
Warning: Undefined variable $exam_number in /home1/bandbozu/getfreedumps.com/quiz.php on line 141

Question ID 16921	Effective IT governance is BEST ensured by:
Option A	utilizing a bottom-up approach.
Option B	management by the IT department.
Option C	referring the matter to the organization's legal department.
Option D	utilizing a top-down approach.
Correct Answer	D

Explanation Explanation: Effective IT governance needs to be a top-down initiative, with the board and executive management setting clear policies, goals and objectives and providing for ongoing monitoring of the same. Focus on the regulatory issues and management priorities may not be reflected effectively by a bottom-up approach. IT governance affects the entire organization and is not a matter concerning only the management of IT. The legal department is part of the overall governance process, but cannot take full responsibility.

Question ID 16922	An internal audit has identified major weaknesses over IT processing. Which of the following should an information security manager use to BEST convey a sense of urgency to management?
Option A	Security metrics reports
Option B	Risk assessment reports
Option C	Business impact analysis (BIA)
Option D	Return on security investment report
Correct Answer	B

Explanation Explanation: Performing a risk assessment will allow the information security manager to prioritize the remedial measures and provide a means to convey a sense of urgency to management. Metrics reports are normally contained within the methodology of the risk assessment to give it credibility and provide an ongoing tool. The business impact analysis (BIA) covers continuity risks only. Return on security investment cannot be determined until a plan is developed based on the BIA.

Previous-Page 1 2. . . 55 56 57 58 59 60 61. . . 76 77 Next-Page

Send email to admin@getfreedumps for new dumps request!!!