General Practices - P1

1. What is the purpose of the Continual Improvement practice?

• To manage the lifecycle of all problems to prevent recurrence

• To protect the information needed by the organization to conduct its business

• To align the organization’s practices and services with changing business needs through ongoing improvement.

• To establish and nurture links between the organization and its stakeholders.

1. Which of the following Seven-step model happens first?

• 1. Where we want to be

• Where are we now

• Did we get there?

• Take action

1. What does the Information Security Management practice aim to protect?

• 1. The organization’s financial assets.

• 1. The information needed by the organization to conduct its business.

• 1. The physical infrastructure of the organization.

• The relationships between the organization and its stakeholders.

1. Which of the following is a key concept of Information Security Management?

• 1. Availability

•  Incident Resolution

• 1. Service Desk Efficiency

• Supplier Performance

Which of the following is NOT an Information Security Concept?

• Confidentiality

• Reliability

• Integrity

• Availability

Which of the following is NOT a prioritization technique used in Continual Improvement?

• Simple and broad (gut feeling)

• Balanced scorecard

• SWOT (strength, weakness, opportunity, threat)

• Incident resolution

Which of the following is a category of Portfolio Management?

• Incident Management Portfolio

• Supplier Portfolio

• Service & Product Portfolio

• Risk Portfolio