Question: 1
Which of the following is MOST important to determine before developing information security program metrics?
Question: 2
For event logs to be acceptable for incident investigation, which of the following is MOST important to implement on all systems to
establish a proper trail of evidence?
Question: 3
Which of the following is the MOST important factor to be considered when reviewing an information security strategy?
Question: 4
A regulatory compliance issue has been identified in a critical business application, but remediating the issue would significantly impact
business operations. What information would BEST enable senior management to make an informed decision?
Question: 5
Management has expressed concern that they are not kept fully informed of key information security risks associated with the organization.
Which of the following should be done FIRST to address this concern?
