1. An information security manager has identified and implemented migrating controls according to industry best practices. Which of the following is the GREATEST risk associated with this approach?
A) Important security controls may be missed without senior management input. B) The cost of control implementation may be too high. C) The migration measures may not be updated in a timely manner. D) The security program may not be aligned with organizational objectives.
2. Following a risk assessment, new countermeasures have been approved by management. Which of the following should be performed NEXT?
A) Schedule the target end date for implementation activities. B) Budget the total cost of implementation activities. C) Develop an implementation strategy. D) Calculate the residual risk for each countermeasure.
3. Which of the following would be of GREATEST concern to an IS auditor evaluating governance over open source development components?
A) The development project has gone over budget and time B) The open source development components do not meet industry best practices C) The software is not analyzed for compliance with organizational requirements D) Existing open source policies have not been approved in over a year
4. The PRIMARY objective of value delivery in reference to IT governance is to:
A) increase efficiency B) promote best practices C) optimize investments D) ensure compliance
5. Which of the following is the PRIMARY objective of implementing IT governance?
A) Resource management B) Performance measurement C) Value delivery D) Strategic planning
Leave a comment