A social audit is concerned with ... the past and ... the future: B,D A) Ignoring B) Assessing C) Delaying D) Planning

Personal Security is ...... to physical security: B

Information is most closely related to: (B)

Physical Security aims to protect users from threats such as: (A)

Communications security includes: C

Domains of computer security do not include: (C)

Network Security does not include protecting: C

Operational Security is most closely related to the enablement of: (A)

Information security is the responsibility of employees more than managers: B

Computer Security is: (A)

Organizational Policies can be thought of as the equivalent of city-specific laws: B

Fostering good business ethics results in ..... operations: A

CSR involves making contributions to for profit institutions: B A) True B) False

Suppliers prioritize ... companies: A A) Ethical B) Unethical

in ..... publicity: B A) unfavorable B) favorable

Maintaining good business ethics is more likely to result in ... profits: B A) Lower B) Higher

US D.O.J recommends ..... sentences for companies with ethics programs: B A) Harsher B) More lenient

Developing and maintaining good employee relations .... Turnover rates: A A) Decreases B) Increases

The purpose of policies is to: A

Public reputation of the company does not influence: C A) Stock value B) Cooperation received C) Liquidity D) Customer retention

The purpose of standards is to: B

Good will makes it .... For corporations to conduct business: A A) Easier B) Harder

A good ethics program results in ... reported misconduct: B A) Decreased B) Increased

Standards are higher level statements than policies: B

Insufficient due diligence most likely leads to: A

Risk assessment is completed .... initial security documents are drafted: A

Guidelines are: B

The software used to perform backups is an example of: B

Standards do not cover details such as: C

It is typical, when drafting policies, to use words like: B

Fostering good business ethics results in ..... operations: A A) consistent B) inconsistent

The purpose of procedures is to: B

The purpose of controls is to: A

One of the major problems in information security is ... efforts: B

Policies are intended to last for a ..... time than standards: B

If policies are detailed, they become: B

Historically, sensitive information was often concentrated in: A

A good ethics program results in ... to seek advice about ethical issues: A A) Willingness B) Reluctance

Board members are expected to conduct themselves in ... standards of integrity: C A) Lowest B) Average C) Highest

Purchasing new security software usually solves all security problems: B

Policies are the .... Important tool in regulating employee behavior: B

Policies enable the replacement of exception with micromanagement: B

Policies enable: B

The purpose of guidelines is to: C

Guidelines are most commonly developed by: B

Policies are most commonly developed by: D

Standards are most commonly developed by: A

Untrained middle management is usually .... to allocate security budgets: B

A policy document should have the signature of... on the front page: C

Procedures are ..... of solving a problem: B

Requiring employees to sign a code of conduct is a: C

Policies are ..... that provide guidance to workers in making decisions: A

The optimal size of a team of reviewers is: B

Successful ethics programs result in .... Rewards for success obtained unethically: A A) Fewer B) Greater

Controls are most commonly developed by: C

Policies are ...... requirements: B

It is a good idea to combine policies, standards and procedures in a single doc: B

Ethics programs do not gain company-wide acceptance without: D A) Leadership endorsement B) Employee Involvement C) Neither D) Both

Fostering good business ethics results in ..... publicity: B

Whistleblowers most commonly fear: C A) Financial Penalties B) Guilty Conscience C) Employer retaliation

In drafting a new policy document, it is better to: A

Making a policy too rigid will result in: B

A good ethics program results in ... observed misconduct: A A) Decreased B) Increased

There is no need to share social audit information with suppliers: B A) True B) False

Organizational code of ethics should foster a culture of accountability: A A) True B) False

Policies are generally aimed at a ..... audience than standards: A

Personal convictions are ... through education: B A) Unaffected B) Improved

Conflict of interest is more likely to ... decision making: B A) Support B) Compromise

How often per month to perform backups is an example of: C

Select the word that describes how laws should be: D A) Engaging B) Intuitive C) Allowed D) Enforced

Promoting diversity and inclusion is a .... Ethical principle: A A) Necessary B) Frowned upon

HIPAA protects the confidentiality of ... data: C A) Educational B) Technical C) Healthcare

Export and espionage laws ... the right to use or sell encryption algorithms: B A) Prohibit B) Reinforce

Policies .... The need to re-invent the wheel: A

Legal obligation of an entity extending beyond criminal or contract law: D A) Due Care B) Restitution C) Jurisdiction D) Liability E) Long arm jurisdiction F) Due diligence

Right of court to impose authority over individuals and organizations if it can establish jurisdiction: E A) Due Care B) Restitution C) Jurisdiction D) Liability E) Long arm jurisdiction F) Due diligence

Ethics training can ... the importance of maintaining professional conduct: A A) Reinforce B) Inhibit

Court’s right to hear a case if the wrong was committed in its territory: C A) Due Care B) Restitution C) Jurisdiction D) Liability E) Long arm jurisdiction F) Due diligence

... are rules that mandate or prohibit certain societal behavior: B A) Ethics B) Laws

Ignorance of a ... is an acceptable defense: A A) Policy B) Law

Organizations ... value environmental responsibility: B A) Decreasingly B) Increasingly

Information security is: “E” A) Great B) Nice C) Fantastic D) Happy new year E) All of the above

Regulates structure of government agencies and relationships with citizens: D A) Civil B) Criminal C) Private D) Public

Policies prevent/minimize: A

Agreement on trade related aspects of intellectual property rights was created by: A A) WTO B) WHO C)UNICEF D) UN

To compensate for wrongs committed by an organization or its employees: B A) Due Care B) Restitution C) Jurisdiction D) Liability E) Long arm jurisdiction F) Due diligence

Select the word that does not describe how laws should be: C A) Published B) Accepted C) Prohibited D) Universal

The Database Right was a response by .... To EU Directive: A A) UK B) Italy C) Spain

Regulates relationships between individuals and organizations: C A) Civil B) Criminal C) Private D) Public

Making a valid effort to protect others and continually maintaining it: F A) Due Care B) Restitution C) Jurisdiction D) Liability E) Long arm jurisdiction F) Due diligence

Governs nation/state and manages relationships/conflicts between entities: A A) Civil B) Criminal C) Private D) Public

The Database Right was a response by the UK to ... Directive: B A) USA B) EU C) ICJ

Addresses violations harmful to society, actively enforced by state: C A) Civil B) Criminal C) Private D) Public

... are definitions of socially accepted behavior: A A) Ethics B) Laws

... carry sanctions of a governing authority: B A) Ethics B) Laws

Export and espionage laws ... the federal government from demanding key registration: A A) Prohibit B) Support

Favoritism and Discrimination are two common ... practices: A A) Unethical B) Ethical

Ignorance of a ... is an unacceptable defense: B A) Policy B) Law

Export and espionage laws .... Export restrictions: B A) Restricted B) Relaxed

Ensuring employees know what constitutes acceptable behavior: A A) Due Care B) Restitution C) Jurisdiction D) Liability E) Long arm jurisdiction F) Due diligence