The GRC Approach to Managing Cybersecurity

Вопрос 1

In a manager's interpersonal role they _____.

• collect, process, and use information in order to complete cybersecurity objectives

• interact with their bosses, employees, co-workers, other organizational stakeholders, and basically anyone involved with or affected by the cybersecurity function

• make choices by selecting from among alternatives and they resolve conflicts, dilemmas, or challenges related to cybersecurity

• unilaterally direct all employee compter uses in the organization

2 In a manager's decisional role they _____.

• collect, process, and use information in order to complete cybersecurity objectives

• interact with their bosses, employees, co-workers, other organizational stakeholders, and basically anyone involved with or affected by the cybersecurity function

• make choices by selecting from among alternatives and they resolve conflicts, dilemmas, or challenges related to cybersecurity

• unilaterally direct all employee compter uses in the organization

3 Controlling is _____.

• the activity that focuses on the structuring of resources

• the administration of employees, making sure you have the right number of people, as well as the right skills within your staff to do the work

• communicating your plans to your employees, and making sure they are working to help achieve the department’s goals

• making sure that the department and it’s employees are making progress towards the objectives that you specified during planning and making sure any problems that come up are solved

4 Which of these is not one of the three general categories of Cybersecurity policy?

• Network Usage Policies (NUPs)

• Enterprise policy (EISP or ECSP)

• Issue-Specific Security Policies (ISSPs)

• System-Specific Policies (SysSPs)

5 The most common approach used by larger organizations puts the cybersecurity department in the _____ department.

• Human Resources

• Information Technology

• Legal

• Internal Audit

Вопрос 6

In general, the larger the organization is, typically the _____ is spent per employee.

• more

• less

• same amount

Вопрос 7

Those cybersecurity professional that define cybersecurity are _____

• those able to handle planning, policy and risk management

• the engineers, programmers and other technical specialists that create security solutions

• those that administer or operate cybersecurity

• those that are responsible for day-to-day monitoring and operations

8 There are two main tools the organization can use to help its employees – training programs and awareness programs. This if often known as SETA with stand for _____

• Systems Education, Training and Alerting

• Security Education, Training and Awareness

• Security Evaluation, Training and Awareness

• Systems Education, Technology and Awareness

Вопрос 9

Training programs created by an organization are primarily designed to _____.

• maximize employee errors by making sure the employee knows how to perform their security-related duties correctly

• meet specific liability requirements

• minimize employee errors by making sure the employee knows how to perform their security-related duties correctly

• reduce employee turnover

Вопрос 10

Verifying a candidate or employees criminal, academic, or financial history is usually done with a _____.

• application form

• phone call

• background check

• polygraph