Exam 11: Security and Personnel

Many who enter the field of information security are technical professionals such as __________ who find themselves working on information security applications and processes more often than traditional IT assignments.

The process of ensuring that no unnecessary access to data exists and that employees are able to perform only the minimum operations necessary on a set of data is referred to as the principle of ____________________.

The __________ is typically considered the top information security officer in the organization.

Job ____________________ can greatly increase the chance that an employee's misuse of the system or abuse of information will be detected by another employee.

A mandatory furlough provides the organization with the ability to audit the work of an individual. _________________________

The position of security technician can be offered as an entry-level position.

Security ____________________ are accountable for the day-to-day operation of the information security program.

The International Society of Forensic Computer Examiners (ISFCE) offers which certifications  

The process of integrating information security perspectives into the hiring process begins with reviewing and updating all job descriptions.

A(n) ____________________ agency provides specifically qualified individuals at the paid request of another company.

The CISA credential is touted by ISACA as the certification that is appropriate for all but which type of professionals  

CompTIA offers a vendor-specific certification program called the Security+ certification.

Friendly departures include termination for cause, permanent downsizing, temporary lay-off, or some instances of quitting. _________________________

The __________ certification program has added a number of concentrations that can demonstrate advanced knowledge beyond the basic certification's CBK.

A background check must always be conducted to determine the level of trust the business can place in a candidate for an information security position.

Like the CISSP, the SSCP certification is more applicable to the security__________ than to the security __________.

The SSCP examination is much more rigorous than the CISSP examination.

Security managers accomplish objectives identified by the CISO and resolve issues identified by technicians. _________________________

Though CISOs are business managers first and technologists second, they must be conversant in all areas of information security, including the technical, planning, and ____________________ areas.

In many organizations, information security teams lack established roles and responsibilities.