CH 4 - PLANNING FOR SECURITY

It is important to consider short-term and long-term

objectives to develop a comprehensive and effective

information security program.

• TRUE

• FALSE

Thoroughly understand your organization’s (a)   are the insights to determine info security program objectives.

Patch management and vulnerability remediation is essential for addressing_______.

• increasing risk

• ignore vulnerabilities

• known vulnerabilities and reducing the risk

• cause potential damage

A well defined policy serves as cornerstone of an info security program, outlining the rules and regulations.

• TRUE

• FALSE

THREE categories of security controls are operational, technical and _________ controls

• strategic

• management

• risk

• threat

Key services in info security services are followings EXCEPT __________.

• Vulnerability management service

• Malware detection services

• Log monitoring services

• Military services

DiD stands for (a)   , to safeguard sensitive info.

Information security governance: Set up a governance

function to deliver assurance information to management,

assisting them in making informed decisions concerning risk

management

• TRUE

• FALSE

Information security architecture: Offer information

security awareness and training programs to personnel.

• TRUE

• FALSE

The principle of (a)   (PoLP) should be adopted

across the organization, ensuring that users are granted

the minimum access required to perform their job

functions.