Governance, Compliance, and Business Continuity Quiz

Match the following objectives with their descriptions related to Business Continuity Planning.

• To ensure business operations can resume after a disruption

• To assign blame for security incidents

• To facilitate a quick recovery from incidents

• To ensure all IT systems are backed up once a year

• To clarify responsibilities during a crisis

• To shut down operations during a crisis

• To maintain regular backups of critical systems

• To allow business operations to continue or recover quickly after an incident

The governance framework in SG-GC-P01 is designed to align security policies with ________ requirements.

• financial

• legal, regulatory, and contractual

• operational

• technical

In SG-IM-P01, the first step in managing an information security incident is ________.

• Post-incident review

• Security incident reporting

• Evidence collection

• Capacity management

According to SG-IM-P01, what is the first action to take during a security incident?

• Post-incident review

• Security incident reporting

• Evidence collection

• Capacity management

The Business Continuity Plan (BCP) is designed to help business operations ________ after an incident.

• shut down

• continue or recover quickly

• assign blame

• back up systems

In the context of SG-IM-P01, the first step in handling a security incident is (a)   .

• Post-incident review
• Security incident reporting
• Evidence collection
• Capacity management

The Business Continuity Plan (BCP) ensures that business operations can (a)   after an incident.

• shut down
• continue or recover quickly
• assign blame
• back up systems

Who is responsible for the implementation of ISMS policies?

• IT Administrator

• Director

• Information Security Management Representative (ISMR)

• All Employees

The governance framework's main purpose is to align security policies with ________.

• financial resources

• legal, regulatory, and contractual requirements

• compliance audits

• system access

Match the following steps in managing a security incident with their correct descriptions.

• Analyzing the incident for future prevention

• Security incident reporting

• Documenting the incident and its impact

• Post-incident review

• Ensuring resources are available for incident response

• Evidence collection

• Gathering and preserving evidence

• Capacity management