Save answer question 27 although it is impossible to

2.00000 points
Save Answer
QUESTION 27
Although it is impossible to eliminate all business risks, a good policy can reduce the likelihood of risk
occurring or reduce its impact. A business must find a way to balance a number of competing drivers.
Which of the following is not one of these drivers?
cost
customer satisfaction
compliance
regulation
2.00000 points
Save Answer
Save Answer
QUESTION 28
Business liability insurance, which will pay for losses within the limits of the policy and lower the
financial loss to the business in the event of an incident, is exclusively available to organizations.
2.00000 points
Save Answer

3/11/2018 Take Test: Mid-Term Exam – 2018_SPR_MAIN_Operations ...
; 5/16
QUESTION 29
Creating an accurate inventory is a challenge, given the speed at which data files are created, deleted,
moved, and changed. It is therefore recommend that an organization prioritize the inventory of assets,
starting with the least sensitive to most sensitive.
2.00000 points
Save Answer
Save Answer
QUESTION 30
An organization mandates use of the firewall, which stops all traffic to the Internet except for Web
browsing and company e-mail. For this control, the question concerning security being addressed is,
“What type of protection will be achieved?”
2.00000 points
Save Answer
QUESTION 31
Of the many factors one must consider to ensure security policies and controls align with regulations;
________________________ is/are important to demonstrate coverage of regulatory requirements
because they show the importance of each security control.
evidence
inventories
security control mappings
business requirements
2.00000 points
Save Answer
QUESTION 32
In January 2013, two important changes were made to ___________________. First, it became easier
2.00000 points
Save Answer
Save Answer
QUESTION 33
The Sarbanes-Oxley (SOX) Act became law in 2002, and it was enacted in reaction to a series of
accusations of corporate fraud. The basic idea behind SOX 404 is to recommend security policies and
controls that provide confidence in the accuracy of financial statements. There are many critics who
argue that the act does not go far enough in describing how a company should report earnings,
valuations, corporate responsibilities, and executive compensation.