Exam 2: Planning and Policy

Before doing a vulnerability test, a security employee must ensure that ________.

CobiT focuses on ________.

The factors that require a firm to change its security planning, protection, and response are called driving forces.

Data breach notification laws typically ________.

________ specifically addresses data protection requirements at health care institutions.

A planned series of actions in a corporation is a(n) ________.

In a firm, codes of ethics apply to ________.

Compliance laws and regulations ________.

Which of the following is a way of responding to risk with active countermeasures?

Which of the following is not one of the three elements in the fraud and abuse triangle?

Which of the following are examples of opportunity?

A technical security architecture should be created ________.

In FISMA, ________ is done internally by the organization.

This book focuses on ________.

When you wish to create a specific firewall, you should create a security policy for that firewall specifically.

Closing all routes of attack into an organization's system(s) is called ________.

A(n) ________ is a statement of what should be done under specific circumstances.

What security functions typically are outsourced?

The purpose(s) of auditing is(are) to ________.

Guidelines are appropriate in simple and highly certain circumstances.