Planning and Implementation of Information Security

When responsibility and authority structures are ill-defined or not defined at all, it results in a breakdown of the __________ systems

• legal control

• informal control

• formal control

• technical control

Identifying operating objectives and goals and costing security initiatives are key decisions under the __________ class.

• legal

• strategic

• operational

• administrative

At a __________ level, the security strategy looks into the threats and weaknesses of the IT infrastructure.

• corporate

• operational

• business

• functional

A definition of __________ helps organizations establish access rules to systems.

• security strategy and policy

• role and skill

• business process

• responsibility and authority structure

Clearly adopting adequate __________ will go a long way in establishing good management practices and will set the scene for effective computer crime management.

• compliance

• tools

• structures

• technologies

Information flows in organizations have to match with __________ in order to ensure the integrity of the operations.

• security and strategy policy

• role and skill

• responsibility and authority structure

• business process

Clarification of the __________ agenda sets the stage for developing the security model.

• strategic

• ownership

• operational

• managerial

At a __________ level, the security strategy determines key decisions regarding investment, divestment, diversification, and integration of computing resources in line with other business objectives.

• corporate

• operational

• functional

• business

Creating adequate structures and processes to realize adequate information handling is a(n) __________ problem.

• strategic

• administrative

• operational

• legal

Optimizing work patterns for efficiency gains is a(n) __________ problem.

• strategic

• administrative

• operational

• legal