Exam 5: Developing the Security Program

The information security ____________________ is usually brought in when the organization makes the decision to outsource one or more aspects of its security program.

Most information security projects require a trained project developer._________________________

The work breakdown structure (WBS)can only be prepared with a complex specialized desktop PC application.

Each organization has to determine its own project management methodology for IT and information security projects.

An organization carries out a risk ____________________ function to evaluate risks present in IT initiatives and/or systems.

The goal of a security ____________________ program is to keep information security at the forefront of users' minds on a daily basis.

The project planner should describe the skills or personnel needed for a task,often referred to as a(n)____________________,needed to accomplish a task.

What is the security education,training,and awareness program? Describe how the program aims to enhance security.

The three methods for selecting or developing advanced technical training are by job category,by job function,and by ____________________.

What are some of the variables that determine how a given organization chooses to construct its InfoSec program?

Which of the following is true about a company's InfoSec awareness Web site?

Which security functions are normally performed by IT groups outside the InfoSec area of management control?

The ____________________ program is designed to reduce the occurrence of accidental security breaches by members of the organization.

The first step in the work breakdown structure (WBS)approach encompasses activities,but not deliverables.

Legal assessment for the implementation of the information security program is almost always done by the information security or IT departments.

Which of the following is an advantage of the user support group form of training?

A(n)____________________ is a specific point in the project plan when a task that has a noticeable impact on plan's the progress is complete.

What is the role of help desk personnel in the InfoSec team?

What is the Chief Information Security Office primarily responsible for?

Which of the following is the most cost-effective method for disseminating security information and news to employees?