c251-3b

Individuals who control, and are therefore responsible for, the security and use of a particular set of information are known as ____________.

• data owners
• data custodians
• data users
• data generators

What is the first phase of the SecSDLC?

• analysis
• investigation
• logical design
• physical design

The individual responsible for the assessment, management, and implementation of information-protection activities in the organization is known as a(n) ____________.

• chief information security officer
• security technician
• security manager
• chief technology officer

In which phase of the SecSDLC does the risk management task occur?

• physical design
• implementation
• investigation
• analysis

An example of a company stakeholder includes all of the following EXCEPT:

• employees
• the general public
• stockholders
• management

A project manager who understands project management, personnel management, and InfoSec technical requirements is needed to fill the role of a(n) ____________.

• champion
• auditor
• team leader
• policy developer

The individual accountable for ensuring the day-to-day operation of the InfoSec program, accomplishing the objectives identified by the CISO, and resolving issues identified by technicians is known as a(n) ____________.

• chief information security officer
• security technician
• security manager
• chief technology officer

A senior executive who promotes the project and ensures its support, both financially and administratively, at the highest levels of the organization is needed to fill the role of a(n) ____________ on a development team.

• champion
• project manager
• team leader
• auditor

When using the Governing for Enterprise Security (GES) program, an Enterprise Security Program (ESP) should be structured so that governance activities are driven by the organization's executive management, and so that it selects key stakeholders as well as the ____________.

• Board Risk Committee
• Board Finance Committee
• Board Ethics Committee
• Chairman of the Board

A formal approach to solving a problem based on a structured sequence of procedures, the use of which ensures a rigorous process and increases the likelihood of achieving the desired final objective, is known as a(n) ____________.

• methodology
• formula
• approach
• model