OFFICIAL (ISC)² CISSP - DOMAIN 1: SECURITY AND RISK
MANAGEMENT QUESTIONS WITH COMPLETE SOLUTIONS
VERIFIED
Acceptable risk
A suitable level of risk commensurate with the potential benefits of the organization's
operations as determined by senior management.
Audit/auditing
The tools, processes, and activities used to perform compliance reviews.
Availability
Ensuring timely and reliable access to and use of information by authorized users.
Business continuity (BC)
Actions, processes, and tools for ensuring an organization can continue critical
operations during a contingency.
Business continuity and disaster recovery (BCDR)
A term used to jointly describe business continuity and disaster recovery efforts.
Business impact analysis (BIA)
A list of the organization's assets, annotated to reflect the criticality of each asset to the
organization.
Compliance
Adherence to a mandate; both the actions demonstrating adherence and the tools,
processes, and documentation that are used in adherence.
Confidentiality
Preserving authorized restrictions on information access and disclosure, including
means for protecting personal privacy and proprietary information.
Data custodian
MANAGEMENT QUESTIONS WITH COMPLETE SOLUTIONS
VERIFIED
Acceptable risk
A suitable level of risk commensurate with the potential benefits of the organization's
operations as determined by senior management.
Audit/auditing
The tools, processes, and activities used to perform compliance reviews.
Availability
Ensuring timely and reliable access to and use of information by authorized users.
Business continuity (BC)
Actions, processes, and tools for ensuring an organization can continue critical
operations during a contingency.
Business continuity and disaster recovery (BCDR)
A term used to jointly describe business continuity and disaster recovery efforts.
Business impact analysis (BIA)
A list of the organization's assets, annotated to reflect the criticality of each asset to the
organization.
Compliance
Adherence to a mandate; both the actions demonstrating adherence and the tools,
processes, and documentation that are used in adherence.
Confidentiality
Preserving authorized restrictions on information access and disclosure, including
means for protecting personal privacy and proprietary information.
Data custodian
