Lot 4

Question 1

A description of a particular way of accomplishing something that is less
prescriptive than a procedure

Answer 1

Guideline -

Question 2

A study to prioritize the criticality of information resources for the
organization based on costs (or consequences) of adverse events. In an impact
analysis, threats to assets are identified and potential business losses determined for
different time periods

Answer 2

Impact analysis -

Question 3

Any event that is not part of the standard operation of a service and that
causes, or may cause, an interruption to, or a reduction in, the quality of that service

Answer 3

Incident -

Question 4

The response of an enterprise to a disaster or other significant
event that may significantly affect the enterprise, its people or its ability to function
productively. An incident response may include evacuation of a facility, initiating a
disaster recovery plan (DRP), performing damage assessment and any other measures
necessary to bring an enterprise to a more stable status

Answer 4

Incident response -

Question 5

The set of responsibilities and practices exercised
by the board and executive management with the goal of providing strategic direction,
ensuring that objectives are achieved, ascertaining that risks are managed appropriately,
and verifying that the enterprise’s resources are used responsibly

Answer 5

Information security governance -

Question 6

The overall combination of technical, operational, and
procedural measures, and management structures implemented to provide for the
confidentiality, integrity, and availability of information based on business requirements
and risk analysis

Answer 6

Information security program -

Question 7

The accuracy, completeness, and validity of information

Answer 7

Integrity -

Question 8

The responsibility of executives and the board of directors; consists of
the leadership, organizational structures and processes that ensure that the enterprise’s
IT sustains and extends the organization’s strategies and objectives

Answer 8

IT governance -

Question 9

A measure that tells management, after the fact, whether an
IT process has achieved its business requirements; usually expressed in terms of
information criteria

Answer 9

Key goal indicator (KGI) -

Question 10

A measure that determines how well the process is
performing in enabling the goal to be reached. A KPI is a lead indicator of capability,
practices, and skills. It measures an activity goal, which is an action that the process
owner must take to achieve effective process performance

Answer 10

Key performance indicator (KPI) -