CYS 310 | Chapter 3 Assessment

FISMA requires federal agencies to protect IT systems and data. How often should compliance be audited by an external organization?

• Never

• Quarterly

• Annually

• Every three years

Which law applies to organizations handling health care information?

• SOX

• GLBA

• FISMA

• HIPAA

CEOs and CFOs can go to jail if financial statements are inaccurate. Which law is this from?

• SOX

• GLBA

• FISMA

• HIPAA

Which law requires schools and libraries to limit offensive content on their computers?

• FERPA

• HIPAA

• CIPA

• SSCP

Employees in some companies are often required to take an annual vacation of at least five consecutive days. The purpose is to reduce fraud and embezzlement. What is this called?

• Job rotation

• Mandatory vacation

• Separation of duties

• Due diligence

Fiduciary refers to a relationship of trust.

• True

• False

Merchants that handle credit cards are expected to implement data security. Which standard should they follow?

• GAISP

• CMMI

• COBIT

• PCI DSS

NIST published Special Publication 800-30. What does this cover?

• Risk assessments

• Maturity levels

• A framework of good practices

• Certification and accreditation

The COBIT framework refers to IT governance. Of the following choices, which best describes IT governance?

• IT-related laws

• IT-related regulations

• Processes to manage IT resources

• Processes to manage IT-related laws and regulations

This standard is focused on maintaining a balance between benefits, risk, and asset use and is based on five principles and comprises seven components. Which standard is described?

• COBIT

• ITIL

• GAISP

• CMMI