Chapter 6: Accountability Controls

What is the main responsibility of information security personnel?

• Developing new software applications

• Managing social media accounts

• Ensuring the reliability and accuracy of financial information

• Enforcing parking regulations

Which type of control provides a reasonable assurance that the IT used by an organization operates as intended?

• Digital security controls

• IT General Control

• Physical security controls

• Cybersecurity controls

Who is responsible for establishing specific internal control policies and procedures?

• Management

• Compliance Specialists

• External Auditors

• IT Support Staff

What is the purpose of security frameworks?

• To confuse employees

• To enforce IT security policies through security controls

• To slow down operations

• To limit access to information

What do internal controls aim to achieve?

• Increase fraudulent business activity

• Reduce the accuracy of financial information

• Ensure compliance

• Decrease operational efficiency

What is the intersection where data liability is defined?

• Between the moon and the stars

• Between security risk and laws that set standards of care

• Between breakfast and lunch

• Between the office and the cafeteria

Which framework is known for enabling an organization to manage security controls across different types of assets?

• The Payment Card Industry Data Security Standard (PCI DSS)

• Center for Internet Security controls

• The Health Insurance Portability and Accountability Act (HIPAA)

• National Institute of Standards and Technology Cyber Security Framework

What is the main purpose of security controls assessments?

• To confuse network teams

• To determine the target systems and applications

• To avoid compliance with regulations

• To keep all assessment activity secret

Who evaluates the effectiveness of control systems and contributes to ongoing effectiveness?

• Compliance Specialists

• IT Support Staff

• External Auditors

• Management

What is the main goal of accountability requirements?

• To enable citizen confidence in administration

• To create chaos

• To increase waste and delay

• To recommend new policies