Podcast
Questions and Answers
What is the primary purpose of a security governance framework?
What is the primary purpose of a security governance framework?
- To enable the organization's governing body to set clear direction and demonstrate commitment to information security and risk management
- To ensure alignment with overall organization policies and goals
- To enhance business value and adequately manage risk
- All of the above (correct)
What is the responsibility of the governing body regarding the organization's information security strategy?
What is the responsibility of the governing body regarding the organization's information security strategy?
- To formally approve the information security strategy, policy, and architecture
- To evaluate the operation of the information security strategy to ensure alignment with business needs
- To regularly review the organization's risk appetite
- All of the above (correct)
Who is ultimately responsible for what the organization does in a publicly held company?
Who is ultimately responsible for what the organization does in a publicly held company?
- The risk management committee
- The information security team
- The board of directors (correct)
- Executive managers
Which of the following is NOT a key objective of the security governance framework?
Which of the following is NOT a key objective of the security governance framework?
What is the primary responsibility of the governing body in terms of security direction?
What is the primary responsibility of the governing body in terms of security direction?
Which of the following is NOT a key component of the security governance framework?
Which of the following is NOT a key component of the security governance framework?
What is recommended for providing effective security direction?
What is recommended for providing effective security direction?
What is the primary role of the CISO according to COBIT 5?
What is the primary role of the CISO according to COBIT 5?
Which of the following roles/structures is NOT mentioned in COBIT 5?
Which of the following roles/structures is NOT mentioned in COBIT 5?
What is the purpose of the Information Security Steering (ISS) committee according to COBIT 5?
What is the purpose of the Information Security Steering (ISS) committee according to COBIT 5?
What is necessary for ensuring that a security mindset permeates the organization?
What is necessary for ensuring that a security mindset permeates the organization?
Flashcards are hidden until you start studying
