CISSP Security Governance Quiz

What is the primary goal of information security governance?

• Reduce IT costs

• Achieve operational efficiency

• Align security with business objectives

• Enforce disciplinary actions

Which of the following is a high-level statement of an organization's beliefs, goals, and objectives?

• Policy

• Procedure

• Standard

• Guideline

Which security document provides step-by-step instructions for implementing a specific control?

• Policy

• Guideline

• Standard

• Procedure

What type of control is a security policy considered to be?

• Technical

• Physical

• Administrative

• Logical

Which principle ensures that no single individual can carry out a critical task alone?

• Least Privilege

• Separation of Duties

• Need to Know

• Role-Based Access Control

Which role is responsible for determining how data should be protected?

• Data Custodian

• Data Owner

• Security Administrator

• System Auditor

What is the purpose of a security baseline?

• Define job responsibilities

• Set minimum security requirements

• Describe corporate mission

• Approve access rights

Which document would most likely be updated in response to a new regulation?

• Security guideline

• Security policy

• Security procedure

• Security baseline

Who is ultimately accountable for the protection of data?

• Data Owner

• Data Custodian

• Security Officer

• System Administrator

Which framework is commonly used for information security governance?

• ITIL

• COBIT

• Agile

• Waterfall