READ Free Dumps For
Warning: Undefined variable $vendor in /home1/bandbozu/getfreedumps.com/quiz.php on line 141
-
Warning: Undefined variable $exam_number in /home1/bandbozu/getfreedumps.com/quiz.php on line 141

Question ID 16937	An organization's information security processes are currently defined as ad hoc. In seeking to improve their performance level, the next step for the organization should be to:
Option A	ensure that security processes are consistent across the organization.
Option B	enforce baseline security levels across the organization.
Option C	ensure that security processes are fully documented.
Option D	implement monitoring of key performance indicators for security processes.
Correct Answer	A

Explanation Explanation: The organization first needs to move from ad hoc to repeatable processes. The organization then needs to document the processes and implement process monitoring and measurement. Baselining security levels will not necessarily assist in process improvement since baselining focuses primarily on control improvement. The organization needs to standardize processes both before documentation, and before monitoring and measurement.

Question ID 16938	Data owners must provide a safe and secure environment to ensure confidentiality, integrity and availability of the transaction. This is an example of an information security:
Option A	baseline.
Option B	strategy.
Option C	procedure.
Option D	policy.
Correct Answer	D

Explanation Explanation: A policy is a high-level statement of an organization's beliefs, goals, roles and objectives. Baselines assume a minimum security level throughout an organization. The information security strategy aligns the information security program with business objectives rather than making control statements. A procedure is a step-by-step process of how policy and standards will be implemented.

Previous-Page 1 2. . . 63 64 65 66 67 68 69. . . 76 77 Next-Page

Send email to admin@getfreedumps for new dumps request!!!