Exam 5: Developing the Security Program

Which of the following functions needed to implement the information security program identifies the sources of risk and may offer advice on controls that can reduce the risk?

Which of the following methods of training results in the lowest cost for the organization?

In general,security programs are overstaffed for the tasks that they have been assigned.

Security spending per user and per machine ____ as organizations grow,leaving most handcuffed when it comes to implementing effective security procedures.

Which of the following is an advantage of the one-on-one method of training?

Very large organizations spend an average of ____ of the IT budget on security.

Which of the following is the first step in the process of implementing training?

List the steps of the seven-step methodology for implementing training.

____ are accountable for the day-to-day operation of the information security program.

The term information security program describes the structure and organization of the effort to contain the risks to the information assets of an organization._________________________

The planning function needed to implement the information security program often takes a project management approach to planning.

The information security budgets of very large organizations grow faster than their IT budgets.

A study of information security positions found that positions can be classified into one of three types: ____________________ are the real technical types,who create and install security solutions.

Large organizations tend to spend ____ on security as smaller organizations.

Which of the following would be responsible for configuring firewalls and IDSs,implementing security software,and diagnosing and troubleshooting problems?

When it comes to the personnel budget,in general,security programs are ____________________ for the tasks they have been assigned.

Which of the following is an advantage of the formal class method of training?

Training is most effective when it is designed for a specific category of users.

An advantage of ____ training is that it can be live,or can be archived and viewed at the trainee's convenience.

Effective training and awareness programs make employees accountable for their actions.