Management of Information Security Ch 11 Exam Questions With Correct Answers

chief information officer CIO - Answer an executive-level position that oversees the organization's computing technology and strives to create efficiency in the processing and access of information security technician/security admin - Answer technically qualified person who may configure firewalls and IDPSs, implement security software, and troubleshoot problems to ensure security controls security manager - Answer accountable for the day to day operation of all or part of the InfoSec program. Accomplish objectives assigned by CISO and resolve issues identified by technicians practice business engagement, focus initiatives on what's learned, align, target and time initiatives, deliver services, establish and maintain credibility, manage relationships - Answer name the six key principles of CISO ISC2 Certifications - Answer offered by International Information Systems Security Certification Consortium. Certified Information Systems Security Profession, Systems Security Certified Practitioner, and Secure Software Life-cycle Professional CISSP - Answer considered the most prestigious cert for security managers and CISOs. requires five years experience in two or more domains or four years of direct security work experience in two domains and a year college degree. SSCP - Answer focuses on practices, roles, and responsibilities defined by experts from major InfoSec industries. More applicable to security managers. focuses on the operational nature of InfoSec SSCP - Answer consists of 125 questions and completed within three hours. Access controls, security operations, risk identification, incident response, cryptography, network and communications, systems and application security Associate of ISC2 - Answer designed for those who want to take any of the certification exams before obtaining the requisite experience for certification ISACA certifications - Answer promotes four certifications: certified information security manager CISM, certified in the governance of enterprise IT CGEIT, certified in risk and information systems control CRISC, certified information security auditor CISA