Governance, Risk, and Compliance Quiz

Which of the following is a goal of GRC?

• Maximize marketing outreach

• Ensure compliance, manage risk, and align IT with business

• Minimize IT investments

• Increase employee turnover

BISA stands for:

• Business Intelligent Security Analysis

• Business-Information Security Alignment

• Business Infrastructure Security Architecture

• Binary Information System Alignment

Which framework provides guidelines for effective GRC?

• OSI

• ISO 9001

• COBIT

• TCP/IP

Information security is considered a business enabler because it:

• Increases operational costs

• Reduces customer engagement

• Supports compliance and improves trust

• Limits innovation

One key requirement for BISA is:

• Ignoring user needs

• Complete separation of IT and business functions

• Close alignment of business goals and IT security

• Focus only on hardware implementation

Which of the following is a global information security standard?

• GDPR

• ISO 27001

• HIPAA

• TCP/IP

An information security professional is NOT responsible for:

• Defining security policies

• Managing human resources

• Monitoring compliance

• Risk analysis

Which standard addresses governance of enterprise IT?

• COBIT

• ITIL

• TCP

• SSL

Which role is generally responsible for strategic decisions in security?

• System Administrator

• Chief Information Security Officer (CISO)

• Network Engineer

• Developer

What does GRC stand for?

• Governance, Regulation, and Compliance

• Governance, Risk, and Compliance

• General Risk and Compliance

• Global Regulatory Compliance