INFORMATION SECURITY GOVERNANCE PRINCIPLES

What is the primary goal of information security governance?

• Ensuring high-speed internet access

• Protecting the confidentiality, integrity, and availability of information

• Creating backup copies of all data

• Training employees on coding standards

What does a security policy document typically include?

• Financial statements

• Guidelines for risk management, acceptable use, and incident response

• Organizational charts

• Marketing strategies

What is the purpose of a password policy?

• To ensure passwords are shared among team members

• To secure credentials and prevent unauthorized access

• To store all passwords in plain text

• To avoid using passwords altogether

What is an Acceptable Use Policy (AUP)?

• A policy for software development guidelines

• A policy defining acceptable usage of organizational resources

• A guideline for physical access control

• A strategy for disaster recovery

What is a 'Need to Know' policy designed to do?

• Restrict information access only to authorized individuals

• Allow all employees to view sensitive data

• Simplify data sharing processes

• Eliminate data classification

Why is risk management important in information security governance?

• It helps organizations increase their market share.

• It identifies potential threats and mitigates risks.

• It focuses on user satisfaction.

• It ensures rapid system deployment.

How does multi-factor authentication (MFA) enhance security?

• By simplifying login processes

• By requiring multiple methods of verification

• By using weaker passwords

• By bypassing encryption

What role does 'Separation of Duties' play in an organization?

• Preventing unauthorized physical access

• Reducing fraud by dividing tasks among multiple individuals

• Enhancing network bandwidth

• Ensuring only one person handles all critical tasks

What is the purpose of auditing user activities in privilege management?

• To simplify user access

• To track and prevent unauthorized activities

• To generate encryption keys

• To increase login speeds

What is a key benefit of using encryption for data protection?

• Speeding up data transmission

• Ensuring that unauthorized users cannot access the data

• Eliminating the need for backups

• Reducing the cost of hardware