Lesson 4: Governance and Risk Management

Question 1

Which of the following risk types relates to negative public opinion?

Accepted Answer

Reputation risk

Question 2

Which of the following are benefits of security controls?

Accepted Answer

All of these

Question 3

What does it indicate when a cybersecurity program is said to be “strategically aligned”?

Accepted Answer

All of these

Question 4

Which term describes the potential negative outcome of a given action or inaction?

Accepted Answer

Threat

Question 5

Which of the following is a common element of all federal cybersecurity regulations?

Accepted Answer

have a written cybersecurity policy

Question 6

Which of the following activities is not considered a governance activity?

Accepted Answer

Purchasing

Question 7

Which term best describes the potential of an undesirable outcome from a given action or inaction?

Accepted Answer

Risk

Question 8

Which of the following statements best describes a vulnerability?

Accepted Answer

A vulnerability is a weakness that could be exploited by a threat source.

Question 9

Inherent risk is the state before __________________.

Accepted Answer

the security measures have been implemented

Question 10

Which of the following terms best describes a disgruntled employee with intent to do harm?

Accepted Answer

Threat source

Question 11

How often should cybersecurity policies be reviewed?

Accepted Answer

At a minimum, once a year and whenever there is a change trigger

Question 12

Cybersecurity policies should be authorized by ____________.

Accepted Answer

the board of directors (or equivalent)

Question 13

Which of the following risk types best describes an example of insurance?

Accepted Answer

Risk transfer

Question 14

Designating an individual or team to coordinate or manage cybersecurity is required by _________.

Accepted Answer

All of these

Question 15

How much undesirable outcome the risk taker is willing to accept for potential benefit is _________.

Accepted Answer

Risk tolerance

Question 16

Which of the following statements best describes policies?

Accepted Answer

Policies are the directives that codify organizational requirements.

Questions 16