Module 3

Question 1

is a critical process used across industries to identify, evaluate, and mitigate potential risk that could impact business operations, safety, and compliance.

Answer 1

Risk Assessment

Question 2

Common Risk Assessment Methodologies

Answer 2

• Qualitative Risk assessment
• Quantitative Risk Assessment (QRA)
• Failure Modes and Effects Analysis
• Hazzard and Operability Study(HAZOP)
• Bowtie Analysis

Question 3

A set of rules and procedures to protect organizational assets.

Answer 3

Security Policies

Question 4

Established guidelines and frameworks to ensure consistent security measures.

Answer 4

Security Standards

Question 5

Reduces the likelihood of security breaches

Answer 5

Risk Mitigation

Question 6

Ensures adherence to legal regulations

Answer 6

Compliance

Question 7

Builds confidence among stakeholders, clients, and employees.

Answer 7

Trust

Question 8

Facilitates efficient response and recovery from security incidents.

Answer 8

Incident Management

Question 9

Key Elements of Security Policies

Answer 9

• Access Control
• Data Protection
• Acceptable Use
• Incident Response
• Training and Awareness
• Compliance Monitoring

Question 10

Types of Security Standards

Answer 10

• ISO 27001
• NIST (National Institute of Standards and Technology)
• PCI DSS
• CIS (Center for Internet Security)

Question 11

International Standard for Information security management systems (ISMS)

Answer 11

ISO 27001

Question 12

Cyber security Frameworks (CSF) for managing and reducing risks

Answer 12

NIST (NATIONAL INSTITUTE of Standards Technology)

Question 13

Payment Card Industry Data Security Standard for payment data protection

Answer 13

PCI DSS

Question 14

Critical Security controls and benchmarks

Answer 14

CIS (Center for Internet Security)

Question 15

it refers to the framework, policies, and process established to ensure the organization’s security objectives align with business goals.

Answer 15

Information Security Governance

Question 16

Steps to Establish Effective Governance

Answer 16

• Assess Current State
• Define Objectives
• Develop Policies
• Implement Frameworks
• Monitor and Improve

Question 17

laws in Information Security

Answer 17

• Protect sensitive data and privacy
• Prevent Cybercrime
• Ensure business continuity
• Build trust with stakeholders

Question 18

Consequences of Non-compliance

Answer 18

• Financial Penalties
• Legal actions and lawsuits
• Reputational Damage
• Operational disruptions