Is a widely accepted international best practices

QUESTION 19
1.
____________ is a widely accepted international best practices
framework for implementing information systems security.
A
.
Information Systems Audit and Control Association
(ISACA)
B
.
Control Objectives for Information and related
Technology (COBIT )
C
.
Business as Usual (BAU)
D
.
Business process reengineering (BPR)

4 points
QUESTION 20
1.
The concept of independent audits (or assessments) is that the further
one is away from the actual transaction, the more unbiased and independent
the opinion that can be obtained.
4 points
QUESTION 21
1.
Authentication is one of the most important components of the user
domain, and it is necessary to determine an authentication method that
makes sense for your organization. It is best to restrict access to an ID and
password to one individual and ensure that users frequently change
passwords.
4 points
QUESTION 22
1.
Of the eight classic personality types in the
workplace, commanders, can often appear angry or even hostile toward
ideas and others on the team and are critical of others’ ideas.
4 points
QUESTION 23
1.
Integrity broadly means limiting disclosure of information to authorized
individuals. For example, if the principle of integrity is applied to e-mail, then
you might have an objective of ensuring that all sensitive information be
protected against eavesdropping. And then to implement this objective you
would require that all e-mails containing sensitive information be encrypted,
and then ensure that only authorized individuals have access to the
decryption key.
True
False
4 points
QUESTION 24
1.
Change Management is a set of processes that are used to ensure
significant changes are implemented to help individuals overcome resistance

to change, help them see value or reason for the change, and accept the
change.
4 points
QUESTION 25
1.
18. When situations arise in which your organization cannot meet one
or more standards immediately, it is vitally important to recognize
an exception to standards to determine where problems may exist.