Information Security Governance and Compliance Quiz

What is the primary focus of governance in cybersecurity?

• Conducting market research

• Aligning security with business goals

• Managing financial risks

• Developing software applications

Which law is associated with data protection in the EU?

• HIPAA

• GDPR

• PCI-DSS

• SOX

What does the CIA triad stand for?

• Confidentiality, Identity, Authentication

• Control, Integrity, Access

• Compliance, Integrity, Availability

• Confidentiality, Integrity, Availability

What is a key component of a security policy?

• Market analysis

• Incident response

• User experience design

• Financial forecasting

What does the Zero Trust Model emphasize?

• Trust only internal users

• Never trust, always verify

• Trust based on past behavior

• Trust everyone by default

Which of the following is a challenge in security policy implementation?

• High employee engagement

• Effective training programs

• Outdated technology

• Strong stakeholder support

What is the penalty for non-compliance with HIPAA?

• Up to $10,000 per violation

• No penalties

• Up to $50,000 per violation

• Up to $100,000 per violation

Which framework is used for risk management in information security?

• COBIT

• ISO 9001

• ITIL

• NIST CSF

What is a common consequence of data breaches?

• Increased customer trust

• Lower operational costs

• Reputational damage

• Higher employee morale

What does DLP stand for in security tools?

• Data Leakage Protocol

• Data Lifecycle Policy

• Digital Loss Protection

• Data Loss Prevention