Q181. The total cost of security controls should:

Q182. Which of the following is a benefit of information security governance?

Q183. Which of the following is MOST beneficial in determining an appropriate balance between uncontrolled innovation and excessive caution in an organization?

Q184. A severe security threat has been detected on your corporate network. As CISO you quickly assemble key members of the Information Technology team and business operations to determine a modification to security controls in response to the threat. This is an example of:

Q185. What process defines the framework of rules and practices by which a board of directors ensure accountability, fairness and transparency in an organization’s relationship with its shareholders?

Q186. When gathering security requirements for an automated business process improvement program, which of the following is MOST important?

Q187. Physical security measures typically include which of the following components?

Q188. Which of the following is true regarding expenditures?

Q189. Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry standards. The organization is a small retail merchant but it is expected to grow to a global customer base of many millions of customers in just a few years.
This global retail company is expected to accept credit card payments. Which of the following is of MOST concern when defining a security program for this organization?

Q190. When is an application security development project complete?

Q191. The rate of change in technology increases the importance of:

Q192. Which of the following would negatively impact a log analysis of a multinational organization?

Q193. When creating contractual agreements and procurement processes why should security requirements be included?

Q194. Smith, the project manager for a larger multi-location firm, is leading a software project team that has 18 members, 5 of which are assigned to testing. Due to recent recommendations by an organizational quality audit team, the project manager is convinced to add a quality professional to lead to test team at additional cost to the project.
The project manager is aware of the importance of communication for the success of the project and takes the step of introducing additional communication channels, making it more complex, in order to assure quality levels of the project. What will be the first project management document that Smith should change in order to accommodate additional communication channels?

Q195. Which of the following is a countermeasure to prevent unauthorized database access from web applications?