Exam 5: Developing the Security Program

In smaller organizations,the security administrator frequently turns to commercial off-the-shelf software to lower the costs of assessing and implementing security._________________________

The ____ may also be called the Manager of Security.

Which of the following is a disadvantage of user support groups?

The Computer Security Act of 1987 requires federal agencies to provide mandatory periodic training in computer security encryption and accepted computer practices to all employees involved with the management,use,or operation of their computer systems._________________________

The typical security staff in a small organization consists of ____.

In large organizations,it is recommended to separate information security functions into four areas,including: non-technology business functions,IT functions,information security customer service functions and information security compliance enforcement functions._________________________

Which of the following is an advantage of the user support group form of training?

Security officers and investigators are part of the ____________________ aspect of security.

____ organizations have information security budgets that grow faster than their IT budgets.

A(n)medium-sized organization typically spends about 20 percent of the total IT budget on information security.________________________

____________________ personnel are the front line of incident response,as they may be able to diagnose and recognize an attack while handling calls from users having problems with their computers,the network,or Internet connections.

The security analyst is a specialized ____.

A(n)small-sized organization typically spends about 5 percent of the total IT budget on information security._________________________

Employee behavior that endangers the security of the organization's information can be modified through security awareness and ____________________.

A good time to conduct training for general users is during ____.

The security education,training,and awareness (SETA)program is designed to reduce the incidence of external security attacks.

Which of the following is NOT a step in the process of implementing training?

Individuals who perform routine monitoring activities are called security technicians.._________________________

One of the most commonly implemented but least effective security methods is the security awareness program.

The responsibilities of the ____ are a combination of the responsibilities of a security technician and a security manager.