Exam 5: Developing the Security Program

The ____________________ function maintains awareness of planned and actual laws and their impact,and coordinates with outside legal council and law enforcement agencies.

A security technician is usually an entry-level position.

The three elements of a SETA program are security education,security training,and ____________________.

Security ____________________ involves providing members of the organization with detailed information and hands-on instruction to enable them to perform their duties securely.

Which of the following variables is the most influential in determining how to structure an information security program?

A security ____________________ is the most cost-effective method of disseminating security information and news to employees.

When users call an organization with problems with their computers,the network,or an Internet connection,they speak with the ____.

The distance learning method of training is in use when a single trainer works with multiple trainees in a formal setting._________________________

Training for management should be conducted in large groups.

A medium-sized organization has ____.

Which of the following is a disadvantage of the one-on-one training method?

A(n)large-sized organization typically spends about $300 per user on information security._________________________

An organization's size does not affect the structure of the organization's information security program.

The information security ____ is typically an expert in some aspect of information security,who is brought in when the organization makes the decision to outsource one or more aspects of its security program.

An organization's ____________________ program refers to the structure and organization of the effort that strives to contain the risks to the information assets of the organization.

In the on-the-job method of training,a trainer works with each trainee on an individual basis._________________________

On-the-job training can result in substandard work performance while the trainee gets up to speed.

Threats from insiders are more likely in a small organization than in a large one.

In informing and preparing employees for their role in information security,security awareness provides the "what",training provides the "how" and education provides the "why"._________________________

Small organizations spend an average of ____ of their IT budget on security.