Question 31
Which of the following processes if the FIRST step in establishing an information security policy?
Question 32
Which of the following is MOST critical to review when preparing to outsource a data repository to a cloud- based solution?
Question 33
In assessing risk, it is MOST essential to:
Question 34
An organization has a process in place that involves the use of a vendor. A risk assessment was completed during the development of the process. A year after the implementation a monetary decision has been made to use a different vendor. What, if anything, should occur?
Question 35
An online banking institution is concerned that the breach of customer personal information will have a significant financial impact due to the need to notify and compensate customers whose personal information may have been compromised. The institution determines that residual risk will always be too high and decides to: