Understanding Cyber Security Policies

What is the purpose of general security-related IT policies?

• To ensure compliance with international trade laws

• To establish and maintain security on an ongoing basis

• To manage financial transactions

• To regulate employee dress code

Which international standard is used in preparing a cyber security policy using the Plan-Do-Check-Act loop?

• ISO 9001:2015

• ISO 14001:2015

• ISO 27001:2013

• ISO 45001:2018

What is the role of a Computer Security Incident Response Team (CSIRT)?

• To manage company finances

• To respond to and manage security incidents

• To oversee marketing strategies

• To conduct employee performance reviews

Which of the following is NOT typically included in an incident response policy?

• Assembling the CSIRT

• Incident reporting procedures

• Employee holiday schedules

• Protecting evidence

What is the purpose of a disaster recovery plan?

• To increase company profits

• To ensure the recovery of critical systems after a disaster

• To manage employee benefits

• To improve customer satisfaction

What does RTO stand for in a disaster recovery plan?

• Recovery Time Objective

• Risk Transfer Objective

• Resource Tracking Objective

• Regulatory Training Objective

Which of the following is a key component of a data protection policy?

• Ensuring organisational compliance with relevant legislation

• Increasing employee productivity

• Reducing operational costs

• Enhancing customer engagement

What is the primary focus of an external service provider (ESP) agreement?

• Employee training

• Data security obligations and legal ownership

• Marketing strategies

• Product development

Which of the following is NOT a typical topic covered in a disaster recovery plan?

• Identification of critical systems

• Employee dress code

• Recovery procedures for critical systems

• Network connectivity and bandwidth

What is the significance of preserving and collating documentation in incident response?

• To improve employee morale

• To prosecute offenders

• To enhance product quality

• To increase sales