CSIA 300 – Midterm | 100% Correct
Answers | Verified | Latest 2024 Version
Within the realm of IT security, which of the following combinations best defines risk? - Threat
coupled with a vulnerability
When determining the value of an intangible asset which is the BEST approach? - With the ass...
CSIA 300 – Midterm | 100% Correct
Answers | Verified | Latest 2024 Version
Within the realm of IT security, which of the following combinations best defines risk? - ✔✔Threat
coupled with a vulnerability
When determining the value of an intangible asset which is the BEST approach? - ✔✔With the assistance
of a finance of accounting professional determine how much profit the asset has returned
Qualitative risk assessment is earmarked by which of the following? - ✔✔Ease of implementation and it
can be completed by personnel with a limited understanding of the risk assessment process
Single loss expectancy (SLE) is calculated by using: - ✔✔Asset value and exposure factor
Consideration for which type of risk assessment to perform includes all of the following: - ✔✔Culture of
the organization, budget, capabilities and resources
Security awareness training includes: - ✔✔Security roles and responsibilities for staff
What is the minimum and customary practice of responsible protection of assets that affects a
community or societal norm? - ✔✔Due care
Effective security management: - ✔✔Reduces risk to an acceptable level
Availability makes information accessible by protecting from: - ✔✔Denial of services, fires, floods, and
hurricanes and unreadable backup tapes
Which phrase best defines a business continuity/disaster recover plan? - ✔✔The adequate preparations
and procedures for the continuation of all organization functions
, Which of the following steps should be performed first in a business impact analysis (BIA)? - ✔✔Identify
all business units within an organization
Tactical security plans are BEST used to: - ✔✔Deploy new security technology
Who is accountable for implementing information security? - ✔✔Security officer
Security is likely to be most expensive when addressed in which phase? - ✔✔Implementation
Information systems auditors help the organization: - ✔✔Identify control gaps
The Facilitated Risk Analysis Process (FRAP) - ✔✔makes a base assumption that a narrow risk assessment
is the most efficient way to determine risk in a system, business segment, application or process.
Setting clear security roles has the following benefits: - ✔✔Establishes personal accountability,
establishes continuous improvement and reduces turf battles
Well-written security program policies are BEST reviewed: - ✔✔At least annually or at pre-determined
organization changes
An organization will conduct a risk assessment to evaluate - ✔✔threats to its assets, vulnerabilities
present in the environment, the likelihood that a threat will be realized by taking advantage of an
exposure, the impact that the exposure being realized will have on the organization, the residual risk
A security policy which will remain relevant and meaningful over time includes the following: -
✔✔Directive words such as shall, must, or will, defined policy development process and is short in length
The ability of one person in the finance department to add vendors to the vendor database and
subsequently pay the vendor violates which concept? - ✔✔Separation of duties
Collusion is best mitigated by: - ✔✔Job rotation
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller hov. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $7.99. You're not tied to anything after your purchase.
