Planning for Security Quiz

What is the primary focus of strategic planning in information security?

• Short-term goals

• Day-to-day tasks

• Long-term direction and organizational goals

• Technical implementation

Which planning level focuses on short-term undertakings that will be completed within one or two years?

• Operational Planning

• Strategic Planning

• Tactical Planning

• Administrative Planning

Which of the following is NOT a type of information security policy?

• Enterprise Information Security Policy (EISP)

• Issue-Specific Security Policy (ISSP)

• Operational Security Policy (OSP)

• Systems-Specific Security Policy (SysSP)

What is the primary responsibility of the information security governance leadership?

• Writing security policies

• Managing risk management practices and ensuring the protection of assets

• Designing the security architecture

• Implementing daily security tasks

What does ISSP stand for?

• Information Security Standards and Procedures

• Issue-Specific Security Policy

• Internet Security Service Providers

• Information Security Service Protocols

Which of the following is a component of the Enterprise Information Security Policy (EISP)?

• Specific technical configurations for firewalls

• Overview of corporate security philosophy

• Minimum password length requirements

• Steps for configuring an operating system

What type of policy defines how specific technology should be implemented and configured?

• Enterprise Information Security Policy

• Issue-Specific Security Policy

• Systems-Specific Security Policy

• General Information Security Policy

Which of the following is an example of a procedural document in information security?

• Guidelines for setting up secure passwords

• A set of steps to change a password

• A general policy on using company equipment

• A report on security breaches

What is the purpose of performance measurement in information security governance?

• To develop new policies

• To track and report progress towards security goals

• To set up a new security infrastructure

• To create security training programs

Which security policy is also referred to as a "fair and responsible use policy"?

• EISP

• SysSP

• ISSP

• Security Guidelines