Week 5 Cybersecurity Governance & Law Quiz

What is the primary goal of IT Governance?

• To increase IT spending

• To align IT strategy with business objectives

• To eliminate cybersecurity risks

• To ensure only IT departments handle decision-making

Which UK law governs the surveillance and monitoring of electronic communications?

• Data Protection Act 2018

• Regulation of Investigatory Powers Act (RIPA)

• Cyber Essentials Act

• The Privacy & Security Act

What are the three key areas covered under Cyber Law?

• Marketing, HR, and IT Support

• Data Protection, Cybercrime, and Intellectual Property

• Public Relations, Law Enforcement, and Web Development

• None of the above

True or False: The GDPR is only applicable within the European Union.

• True

• False

IT Governance frameworks help organizations manage cybersecurity risks by:

• Providing a structured approach to align IT strategy with business goals

• Ensuring compliance with legal and regulatory requirements

• Facilitating risk management and decision-making processes

• All of the above

What does the "P" in PESTLE analysis stand for?

• Political

• Privacy

• Profitability

• Performance

Which of the following is NOT one of the six principles of IT Governance?

• Limit decision-making structures

• Remove senior management from IT decisions

• Provide transparency & education

• Design exception processes

What is the purpose of a SWOT analysis in IT Governance?

• To analyze IT performance issues only

• To evaluate an organization’s Strengths, Weaknesses, Opportunities, and Threats

• To eliminate all cybersecurity risks

• To monitor financial expenditures

True or False: Porter’s Five Forces model helps assess market attractiveness and competitive positioning.

• True

• False

Describe one major reason why IT Governance frameworks fail.

• Lack of executive support

• Inadequate resources

• Poor communication

• Resistance to change