Exam 5: Developing the Security Program

In ____ organizations,the average amount spent on security per user is less than in any other type of organization.

The security education,training,and awareness (SETA)program is designed to ____ by/of members of the organization.

Two methods for customizing training for users are by functional background and by ____________________.

Which of the following functions needed to implement the information security program evaluates risk present in IT initiatives and/or systems?

On average,the security budget of a medium-sized organization is ____ of the total IT budget.

Training for managers would be more detailed than that for security staff.

____________________ training consists of trainees learning the specifics of their jobs while working,using the software,hardware,and procedures they will continue to use.

A SETA program consists of three elements: security education,security training,and ____.

The ____ is primarily responsible for the assessment,management,and implementation of the program that secures the organization's information.

In large organizations the information security department is often located within the ____________________ department.

When developing an awareness program,be sure to: Focus on people both as part of the problem and as part of the solution.

Large organizations spend a larger portion of their IT budget on security than small organizations.

To their advantage,some observers feel that small organizations avoid some threats precisely because of their small size._________________________

GGG security (which stands for ____)is commonly used to describe the physical security aspect of security.

The aim of a security ____________________ program is to keep information security at the forefront of users' minds on a daily basis.

Distance learning/Web seminars can be low- or no-cost.

Security managers commonly report to the ____.

The organization's size and available resources also indirectly affect the size and structure of the information security program._________________________

Organizations with complex IT infrastructures are likely to require more information security support than those with less complex infrastructures.

In ____________________ training,prepackaged software provides training at the trainee's workstation.