Domain: Information Security & Risk Management What is the process that determines what security controls are needed to adequately protect the information system that Best answer: A supports the operations and assets of an organization? Risk management Threat and vulnerability assessments are a part of risk Threat assessment management process. Vulnerability assessment Security Security audit determines whether the required controls have been implemented. In information security management, what is the primary Domain: Information Security & Risk Management responsibility of an information (/ data) owner? Ensure accuracy of the data Best answer: D Authorizes user access and determine privilege Back up data regularly The owner of information (/ data) that understands the value and Determine the data sensitivity (/ classification) level potential impact should determine the sensitivity of data.
What is the process that determines what security controls are needed to adequately protect the information system that supports the operations and assets of an organization? Risk management Threat assessment Vulnerability assessment Security Domain: Information Security & Risk Management Best answer: A Threat and vulnerability assessments are a part of risk management process. Security audit determines whether the required controls have been implemented. In information security management, what is the primary responsibility of an information (/ data) owner? Ensure accuracy of the data Authorizes user access and determine privilege Back up data regularly Determine the data sensitivity (/ classification) level Domain: Information Security & Risk Management Best answer: D The owner of information (/ data) that understands the value and potential impact should determine the sensitivity of data.