Chapter 9: Security Management
Practices Question and answers
already passed 2025/2026
value proposition - correct answer ✔Organizations strive to deliver the most value with a given level of
investment
Benchmarking - correct answer ✔Drawing from established security models and frameworks
Compare your organization's efforts to those of other organizations you feel are similar in size, structure,
and/or industry
Standard of due care - correct answer ✔For legal reasons, certain organizations may be compelled to
adopt a stipulated minimum level of security, as to establish a future legal defense they may need to
verify that they have done what any prudent organization would do in similar circumstances
Due diligence - correct answer ✔that an organization ensure that the implemented standards continue
to provide the required level of protection
best security practices (BSPs) - correct answer ✔security efforts that are consid- ered among the best in
the industry
recommended practices - correct answer ✔Security efforts that seek to provide a superior level of
performance in the protection of information
baselining - correct answer ✔the organization conducts an initial assessment of current performance
Practices Question and answers
already passed 2025/2026
value proposition - correct answer ✔Organizations strive to deliver the most value with a given level of
investment
Benchmarking - correct answer ✔Drawing from established security models and frameworks
Compare your organization's efforts to those of other organizations you feel are similar in size, structure,
and/or industry
Standard of due care - correct answer ✔For legal reasons, certain organizations may be compelled to
adopt a stipulated minimum level of security, as to establish a future legal defense they may need to
verify that they have done what any prudent organization would do in similar circumstances
Due diligence - correct answer ✔that an organization ensure that the implemented standards continue
to provide the required level of protection
best security practices (BSPs) - correct answer ✔security efforts that are consid- ered among the best in
the industry
recommended practices - correct answer ✔Security efforts that seek to provide a superior level of
performance in the protection of information
baselining - correct answer ✔the organization conducts an initial assessment of current performance
