Worksheets5.3 Delivering Risk Assessment
Total questions: 14
Worksheet time: 11mins
What components are prevalent in a Base vCISO?
Assessment, road map, and daily coaching/ guidance.
Assessment, road map, and weekly coaching/ guidance.
Assessment, road map, and monthly coaching/ guidance.
Assessment, road map, and very little guidance upon the initial collaborative meetings to discuss findings.
It is not typical for a client to want/need the vCISO to do some of the work that comes in the road map?
True
False
S2score is a security metric that allows you to track and (a) risk.
Administrative controls are the "rules" or (a) .
Sustainability over time, requires which controls to be compliant?
Administrative
Physical
Internal Technical
External Technical
Which control(s) has a relative score to Administrative Controls?
Administrative
Physical
Internal Technical
External Technical
Understanding the audience is important for a vCISO. When communicating with the Board and CEO, it is important that your communication is: (select all that apply)
Short and Sweet
Precise
Graphically represented
Using relevant comparisons
All of the above
When communicating with an organization, which roles like to look at comparisons.
Board
CEO
Other Executives
Managers
Which roles are important that a vCISO should be sure to not make them look bad.
Board
CEO
Other Executives
Managers
Which role(s) like the details
CEO/Board
Managers
Analysts
External Auditor
Which role is typically looking for a partner?
CEO
Managers
Analyst
External Auditor
Which role(s) require us to ask the question...can we justify some of the things they've been saying all along?
CEO
Managers
Analyst
External Auditors
Which role(s) is important not to insult them or their intelligence?
CEO
Managers
Analyst
External Auditors
Be prepared to defend your reports by: (select all that apply)
Anticipating points of contention and your argument to defend.
Providing timeline that is realistic.
Set appropriate expectations.
It is okay to predict but make sure it is clear.
