Global Knowledge Standards Activity

It is the law that created the Department of Information and Communications Technology?

• RA 10173

• RA 10175

• RA 10844

• RA 11032

RA 10175 is also known as

• Data Privacy Act of 2012

• Cybercrime Prevention Act of 2012

• Department of Information and Communications Technology Act of 2015

• Ease of Doing Business and Efficient Government Service Delivery Act of 2018

– An administrative, legal, physical, operational, and technical remedy, mitigation, countermeasure or safeguard against the potential risk(s) -

• Exposure

• Risk

• Treatment

• Vulnerability

Which is the correct order of Risk Assessment Process?

• Analysis, Identification, Evaluation, Treatment

• Analysis, Evaluation, Treatment, Identification

• Identification, Analysis, Treatment, Evaluation

• Identification, Analysis, Evaluation, Treatment

Completely eliminating the risk by not engaging in the activity that creates it. This might be the best option for very severe risks, but it's not always practical.

• Risk Avoidance

• Risk Acceptance

• Risk Retention

• Risk Sharing

One of the Primary Cybersecurity Incidents is ___________ where the data stored in the system (managed on premise or hosted/managed by a third party) has been stolen or exposed.

• System Malfunction

• Data Confidentiality Breach

• Data integrity or availability loss

• Malicious Activity

All of these are Cybersecurity Incident Business Impact except for _______ .

• Business Interruption

• External entity payment costs

• Customer notification costs

• Human Error

Data, record and knowledge that has value to the individual or organization.

• Information Asset

• Physical Asset

• Virtual Asset

• All of these

In incident response team organization, they are the one responsible for propagating and reporting incidents.

• Incident Response Team Manager

• Planning Team

• Monitoring Team

• Response Team

In the Information Security Organization Structure who has the highest authority?

• SOC

• IPS

• CISO

• DPO