IAS1 - LAP2 - 3B

Which one is one of the two approaches to Information Security Implementation?

• Bottom-Up Approach

• Touch-Down Approach

What is a disadvantage of the Bottom-Up Approach?

• Lack of cooperation between senior managers and relevant directives

• High cost of implementation

• Slow response to threats

What does the Top-Down Approach involve?

• Policies and procedures formulated by executives

• Direct involvement of system administrators

• Focus on technical aspects only

What is the first phase of the Systems Development Life Cycle?

• Investigation Phase

• Analysis Phase

• Implementation Phase

What is the purpose of the Maintenance and Change Phase?

• To ensure the system remains effective and secure

• To develop new features

• To conduct user training

What is the focus of the Security Assurance Requirements Analysis?

• Identifying protection requirements through risk assessment

• Developing user training programs

• Creating marketing strategies

What is the goal of Continuous Monitoring in the Maintenance and Change Phase?

• To ensure controls continue to be effective

• To develop new software

• To conduct user feedback sessions

What is the purpose of Security Certification?

• To validate that controls are effectively implemented

• To create new security policies

• To train staff on security measures

What does the term 'Security Accreditation' refer to?

• Authorization of an information system to process information

• Development of security software

• Training of security personnel

What is the significance of Configuration Management in the Maintenance and Change Phase?

• To consider potential security impacts due to changes

• To develop new features for the system

• To conduct user training