Roadmap Trivia Part 2

Which of the two statements below is the Mission of the ISM Team?

• To implement integrated risk assessment processes to measure the effectiveness of information security controls.

• To enable a balanced set of security controls to reduce the Company’s risk profile.

Which of these capabilities is not considered as deliverable in ISM team in 2022.

• Web Application Security Testing

• Information Security Incident Testing

• Information Security Consulting

• Information Risk Assessment (IRA)

Which among these 2022 strategies belongs to ISM team?

• Provide information security training and awareness campaigns

• Improve efficiency through standardization, automation, self-services

• Enhance the reporting capabilities at the services level and use metrics to measure success

• All of the above

Which among these 2022 goals is the focus of the ISM team?

• Management Focus

• People focus

• Implementation Focus

Which of the following is a false statement?

• Integrate the IRA process with Global Release Management Process

• Implement SLAs on all services, for a better resources’ allocation

• No formal training required on new technologies< security testing techniques, information risk management frameworks

What is the general roadmap presentation from Dean?

• Technology Risk Management

• Technology Risk Audit

• Technology Risk SOX

What is the scope that was removed from the TRM current capabilities?

• Vendor assessments moved to Procurement end of 2020 – transition work early 2021

• IT Audit support in collaboration with RCSA team

• IT SOX scoping of changes and new systems

What are the 2022 strategies of TRM?

• On time delivery of IT SOX Audit with no significant deficiencies

• Improve efficiency through the increased use of process and tool automation

• All of the above

What is TRM’s high performance team goal for 2022. Which among the statements are not true.

• Continue to balance the What and How of getting things done

• Participate in Employee Engagement activities

• Work independently with other 1st line assurance teams, Global Risk, 2^nd line, and business teams on cross-segment assessments, standards reviews, and projects

How many steps are required to complete the RCSA review ( Risk , Control, Self and Assessment )

• 5

• 7

• 3

• 0