A couple of years ago you started your company which has now grown from 1 to 20 employees. Your company’s information is worth more and more and gone are the days when you could keep control yourself. You are aware that you have to take measures, but what should they be? You hire a consultant who advises you to start with a qualitative risk analysis.
What is a qualitative risk analysis?
In the event of an Information security incident, system users' roles and responsibilities are to be observed, except:
Which of the following is a preventive security measure?
How are data and information related?
A member of staff denies sending a particular message.
Which reliability aspect of information is in danger here?
The computer room is protected by a pass reader. Only the System Management department has a pass.
What type of security measure is this?
A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?
Which department maintain's contacts with law enforcement authorities, regulatory
bodies, information service providers and telecommunications service providers depending on the service required.
Which of the following does an Asset Register contain? (Choose two)
There is a network printer in the hallway of the company where you work. Many employees don’t pick up their printouts immediately and leave them on the printer.
What are the consequences of this to the reliability of the information?
The following are purposes of Information Security, except:
Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?
The following are the guidelines to protect your password, except:
What type of measure involves the stopping of possible consequences of security incidents?
Who is responsible for Initial asset allocation to the user/custodian of the assets?