Security governance and risk management challenge

You recently completed the development of the organization’s BCP. Whois the ideal person to approve the BCP?

Performming audits and assessments to ensure that the organization is protected is

You are identifying security controls for systems used for business. Why might you choose to use a security baseline?

One day you noticed the secure door was left open. You closed the door and inform the security team. You're practicing:

What is a vulnerability?

Which one of the following mechanisms is NOT commonly seen as a deterrent to fraud?

Tom is expected to protect the PII. What term describes the research undertaken before decisions and actions are made?

Which best describes the purpose of the ALE calculation?

Mike recently implemented an IDS to block common network attacks. What strategy is Mike pursuing?

What is the purpose of a baseline?

Which security program document contains the most details and step-by-step instructions?

What are the actions that are suggested when standards are not applicable in a particular situation?

Taking all measures to prevent security breaches and taking steps to mitigate damages is

What is the goal of the BCP process?

Arganization should implement overlapping security controls whenever possible? This principle is called

Purchasing cybersecurity breach insurance is an example of

Which is the most valuable technique to determine if a security control should be implemented?

Tom enables an application firewall to block many types of application attacks. What metric is Tom trying to lower?

What is the purpose of standards?

Which one of the following is NOT an example of a technical control?