Chapter 7: General Management Practices

Which practice has a purpose that includes managing risks to confidentiality, integrity and availability?

• Information security management

• Continual improvement

• Monitoring and event management

• Service level management

The management of information security incidents usually requires .

• immediate escalation

• Specialist teams

• Specialist teamsA separate process

• Third party support

Which practice has a purpose that includes aligning the organization's practices and services with changing

business needs?

• Service level management

• Service configuration management

• Relationship management

• Continual improvement

Which statement about 'continual improvement' is CORRECT?

• All improvement ideas should be logged in a single 'continual improvement register'

• A single team should carry out 'continual improvement' across the organization

• Continual improvement should have minimal interaction with other practices

• Everyone in the organization is responsible for some aspects of 'continual improvement'

The purpose of the supplier management practice is to ensure that the organization's suppliers and their ______ are managed appropriately to support the seamless provision of quality products and services.

• costs

• values

• performances

• users

Which statement about a 'continual improvement register' is CORRECT?

• It should be managed at the senior level of the organization

• It should be used to capture user demand

• There should only be one for the whole organization

• It should be re-prioritized as ideas are documented

How should the current state be assessed?

• Assessing current state should be done objectively

• Assessing current state is only done for platform and infrastructure

• Assessing current state may be skipped if time is limited

• Assessing current state should be done subjectively