Domain1: laws Regulations & Compliance and investigations

Question 1

What 3 main security objectives of security fundamentals?

Answer 1

• Availability
• Integrity
• Confidentiality

Question 2

3 example of Tangible assets

Answer 2

*Computers
*Facilities
*Supplies

Question 3

3 example of Intangible assets

Answer 3

*Reputation
*Data
*Intellectual property

Question 4

What is risk analysis? explain

Answer 4

Risk Analysis is a part of overall Risk Management. Risk Analysis is used to determine whether security is cost effective, relevant, timely and responsive to threats. Risk Analysis helps prioritize their risks and how much money should be spent to safeguard against risks

Question 5

Steps in risk analysis

Answer 5

1. Risk Identification
   * Determine risks, identify hazards,
   * Who or what can be harmed and how?
2. Implement policies and controls
3. Monitor systems and practices involved
4. Promote awareness

Question 6

Risk analysis process

Answer 6

Step 1: Asset and Information Value
Assignment

Step 2: Risk Analysis andAssessment

Step 3: Countermeasure Selection
and Implementation

Question 7

3 types of security policies

Answer 7

*Organizational Policy
*Issue Specific Policy
*System Specific Policy

Question 8

What is security policy?

Answer 8

An overall general statement produced by senior management that dictates what role security plays within the organization

Question 9

Security program lifecycle

Answer 9

1. Plan & Organize
2. Implement
3. Operate & Maintain
4. Monitor & Evaluate

Question 10

Who appoints a Security Officer (CSO and/or CISO)?

Answer 10

Senior management appoints a Security Officer (CSO
and/or CISO).

Question 11

Six principal of cobit

Answer 11

1. Meet stakeholder needs,
2. Holistic approach,
3. Dynamic governance system,
4. Distinct governance from management,
5. Tailored to enterprise needs,
6. End-to-end governance system

Question 12

Domains of COBIT

Answer 12

1. Plan and Organize
2. Acquire and Implement
3. Deliver and Support
4. Monitor and Evaluate

Question 13

What is security Governance?

Answer 13

Information security governance is all of the tools, personnel and
business processes that ensure that security is carried out to meet an organization’s specific needs”

Question 14

Committee of Sponsoring Organizations of the Treadway Commission (COSO) Areas:

Answer 14

1. Control Environment
2. Risk Assessment
3. Control Activities
4. Information and Communication
5. Monitoring

Question 15

Fullform of ITIL

Answer 15

The Information Technology
Infrastructure Library

Question 16

What is ISO/IEC 27000 Series

Answer 16

Set of standards for infosec that describe security processes
and mechanism
it Can be used as blueprint to develop security program
Companies can implement and be certified to provide
confidence to customers and business partners