Quiz on Planning for Security

What is the first priority of the CISO and the information security management team?

• Developing a contingency plan

• Creating a tactical plan

• Establishing an operational plan

• Creating a strategic plan

What does governance in an organization primarily ensure?

• Informed and prudent strategic decisions

• Increased market share

• Maximization of profits

• Reduction of employee turnover

Which of the following is NOT a goal of information security governance?

• Value delivery

• Resource management

• Strategic alignment

• Employee satisfaction

What is an Enterprise Information Security Policy (EISP) also known as?

• Contingency security policy

• Technical security policy

• Operational security policy

• General security policy

What does an Issue-Specific Security Policy (ISSP) address?

• General security measures

• Specific areas of technology

• Long-term strategic goals

• Overall organizational security

What is the purpose of a Business Impact Analysis (BIA)?

• To assess employee performance

• To identify and prioritize business processes

• To create marketing strategies

• To evaluate customer satisfaction

Which of the following is a component of an Incident Response Plan?

• Market analysis

• Financial forecasting

• Employee training

• Incident detection

What is the focus of crisis management?

• Financial recovery

• Technology upgrades

• People involved

• Market expansion

What does disaster recovery planning prepare an organization for?

• Technological advancements

• Market competition

• Natural or man-made disasters

• Employee training

What is the primary goal of business continuity planning?

• To ensure continuous business operations

• To improve customer service

• To increase profits

• To enhance employee morale