Exam 11: Security and Personnel

What functions does the CISO perform

"Builders" in the field of information security provide day-to-day systems monitoring and use to support an organization's goals and objectives.

Which of the following is not one of the categories of positions defined by Schwartz, Erwin, Weafer, and Briney  

ISACA touts the CISA certification as being appropriate for accounting, networking, and security professionals._________________________

The general management community of interest must work with information security professionals to integrate solid information security concepts into the personnel management practices of the organization.

The ISSMP examination is designed to provide CISSPs with a mechanism to demonstrate competence in __________.

When new employees are introduced into the organization's culture and workflow, they should receive an extensive information security briefing as part of their employee ____________________.

According to Schwartz, Erwin, Weafer, and Briney, "__________" are the real techies who create and install security solutions.

The use of standard job descriptions can increase the degree of professionalism in the information security field.

In most cases, organizations look for a technically qualified information security generalist who has a solid understanding of how an organization operates.

"Administrators" provide the policies, guidelines, and standards in the Schwartz, Erwin, Weafer, and Briney classification. _________________________

The ____________________ of (ISC)2 program is geared toward those who want to take the CISSP or SSCP exam before obtaining the requisite experience for certification.

Many hiring managers in information security prefer to recruit a security professional who already has proven HR skills and professional experience, since qualified candidates with information security experience are scarce. _________________________

Because the goals and objectives of CIOs and CISOs tend to contradict each other, InformationWeek recommends: "The people who do and the people who watch shouldn't report to a ____________________ manager."

Describe the concept of separation of duties.

To maintain a secure facility, all contract employees should be escorted from room to room, as well as into and out of the facility.

The information security function can be placed within the __________.

The information security function cannot be placed within protective services.

Sometimes, contracted employees are self-employed or are employees of an organization hired for a specific, one-time purpose. These people are typically referred to as ____________________.

__________ is the requirement that every employee be able to perform the work of another employee.