Security Governance Principles - MCQs

What is the primary purpose of security governance?

• Managing IT resources

• Aligning security with business objectives

• Preventing cyber threats completely

• Limiting access to security teams

Which framework is widely used for implementing an Information Security Management System (ISMS)?

• COBIT

• ISO/IEC 27001

• ITIL

• PCI-DSS

Which principle ensures that security decisions align with business goals?

• Risk Management

• Compliance

• Security Awareness

• Governance

Which policy defines rules for handling and classifying data?

• Access Control Policy

• Data Protection Policy

• Acceptable Use Policy

• Risk Management Policy

What does risk management in security governance focus on?

• Avoiding all risks

• Identifying, assessing, and mitigating risks

Which of the following is NOT a key component of ISMS?

• Policies

• Standards

• Software licensing

• Procedures

What is the main purpose of an Access Control Policy?

• Define user authentication and authorization rules

• Monitor security logs

• Establish a backup process

• Manage software updates

Which security governance framework focuses on IT governance and control objectives?

• ITIL

• COBIT

• NIST

• GDPR

Which ISMS policy outlines acceptable usage of company IT resources?

• Acceptable Use Policy

• Risk Management Policy

• Compliance Policy

• Security Awareness Policy

Q10. Which standard provides guidelines for risk management?

• ISO 31000

• ISO 9001

• ISO 14001

• ISO 45001