Security Governance Principles

Question 1

At what level does Cybersecurity fall within an organization?

Answer 1

Enterprise Risk Management Decision making is done at the risk management side.

Question 2

Business metrics to measure performance in relation to strategic goals and objectives. Management metrics used to inform decision making.

Answer 2

KPIs

Question 3

Approach take to achieve a goal

Answer 3

A strategy

Question 4

Mitigate risk to an acceptable level

Answer 4

Risk Management

Question 5

Achieve operational synergies and efficiencies

Answer 5

Process Integration

Question 6

Approach taken to achieve a goal

Answer 6

Strategy

Question 7

A broad primary outcome

Answer 7

Goal

Question 8

Measurable steps taken to achieve a strategy

Answer 8

Objective

Question 9

A tool used in support of an objective

Answer 9

Tactic

Question 10

Align departmental strategies with business strategies to support organizational goals

Answer 10

Departmental Alignment

Question 11

Optimize investments in support of business objectives.

Answer 11

Value Delivery

Question 12

Efficient and effective use of resources

Answer 12

Resource Managment

Question 13

Ensure customer and stakeholder satisfaction

Answer 13

Satisfaction

Question 14

Enhance organizational reputation with stakeholders and the broader community

Answer 14

Reputation Enhancement

Question 15

Reduce the likelihood of successful litigation by adhering to the principle of due care.

Answer 15

Reduced Liability

Question 16

Term used to describe the responsibility of leadership to determine, articulate, authorize, and fund the desired state of cybersecurity.

Answer 16

Security Governance

Question 17

The outcome when cybersecurity decision making is tied to organizational objectives

Answer 17

Strategic Alignment

Question 18

This group has a fiduciary responsibility.

Answer 18

Board of Directors

Question 19

The legal term applied to the standard of care exercised by a prudent person.

Answer 19

Due Care

Question 20

The term used to describe the investigation of a business or person prior to and during the lifetime of a relationship.

Answer 20

Due Diligence

Question 21

A logical structure

Answer 21

Framework

Question 22

What is the purpose of a framework?

Answer 22

Document and organize processes

Question 23

An operational framework contains what four things?

Answer 23

Policies Standards Guidelines Practices

Question 24

What are the 5 types of frameworks

Answer 24