The security posture of an organization is usually

QUESTION 22
The security posture of an organization is usually expressed in terms of ___________________ , which
generally refers to how much risk an organization is willing to accept to achieve its goal, and
____________________, which relates how much variance in the process an organization will accept.
risk assessment, risk manageability
risk tolerance, risk appetite
risk awareness, risk reduction
risk appetite, risk tolerance
2.5 points Saved
Saved
QUESTION 23
The _______________________domain establishes the context and business view for a risk
evaluation and guarantees that risk activity aligns with the business goals, objectives, and tolerances.
The ________________ domain establishes that technology risks are identified and delivered to
leadership in business terms.
2.5 points Saved
Saved
QUESTION 24
The concept of _________________ comes from the acknowledgment that data changes form and
2.5 points Saved
Saved
QUESTION 25
The NIST SP 800-53, “Recommended Security Controls for Federal Information Systems” was written
using a popular risk management approach. Which of the following control areas best fits this
description: “This is the area in which an organization develops, documents, periodically updates, and
implements security plans for information systems”?
2.5 points Saved
Saved
QUESTION 26
As a result of a U.S. Supreme Court ruling challenging the restriction of access to information in
libraries, the ________________ was declared constitutional. However, the courts do require schools
and libraries to unblock sites when requested by an adult.
Sarbanes-Oxley (SOX) Act
Gramm-Leach-Bliley Act (GLBA)
Federal Information Security Management Act (FISMA)
Children’s Internet Protection Act (CIPA)
2.5 points Saved
Saved
QUESTION 27
It is important for an organization to determine how it wants to manage ____________________, which
means how to group various tasks, and____________________, which relates to the number of layers
and number of direct reports found in an organization.
2.5 points Saved
Saved