Exam 5: Developing the Security Program

Security training and awareness activities can be undermined if information security personnel do not set a good example._________________________

The information security ____________________ is usually brought in when the organization makes the decision to outsource one or more aspects of its security program.

Computer-based training (CBT)allows users to learn from each other.

The ____________________ program is designed to reduce the incidence of accidental security breaches by members of the organization.

Training for ____ may require the use of consultants or outside training organizations.

In the ____________________ method of training,a single trainer works with multiple trainees in a formal setting.

Explain the conflict between the goals and objectives of the CIO and the CISO.

An organization carries out a risk ____________________ function to evaluate risks present in IT initiatives and/or systems.

Keys to a good security ____________________ series include varying the content and keeping posters updated.

Large organizations spend an average of ____ of the IT budget on security.

Several keys to a good poster series include 1)standardizing the content and keeping posters updated,2)making them complex,and thus visually interesting,3)making the message clear and 4)reminding users of penalties for non-compliance.

Which of the following training methods uses a sink-or-swim approach?

Managers often resist organized training of any kind._________________________