INMT FINAL EXAM WITH COMPLETE SOLUTIONS 100% VERIFIED LATEST UPDATE
2026-27!!
governance - (ANSWER)Governing/managing processes, technology, and systems
Risk Management - (ANSWER)Identifying (and controlling) the risks associated with processes,
technologies and systems
Compliance - (ANSWER)Adhering to the laws and regulations that govern organizations
IT Governance - (ANSWER)includes processes that inform, direct, manage, & monitor organization
activities, enabling an organization to achieve its goals.
IT Regulatory Environment - (ANSWER)Each comes with official document that details requirements for
compliance. Examples are FERPA and HIPAA
risk - (ANSWER)a measure of the potential for loss or damage when a threat exploits a vulnerability.
Standards vs Frameworks - (ANSWER)Defined very well/one way to do things vs. general guidance on
how to do something
vulnerability - (ANSWER)Weakness or flaw in an information asset/system that potentially exposes an
entity to threats.
Threat - (ANSWER)An event or condition that has the potential for causing asset loss and/or undesirable
consequences or impact.
COSO Enterprise Risk Management (ERM) - (ANSWER)process designed to identify potential events that
may affect the entity and provide reasonable assurance regarding the achievements
Hacking - (ANSWER)An attempt to gain unauthorized access to some element of a computer system
, INMT FINAL EXAM WITH COMPLETE SOLUTIONS 100% VERIFIED LATEST UPDATE
2026-27!!
Social Engineering - (ANSWER)An attack based on deceiving users or administrators at the target site
into revealing confidential or sensitive information
Malware - (ANSWER)Short for malicious software, this is software designed to infiltrate, damage or
obtain information from a computer system without the owner's consent
Internal Control - (ANSWER)A process designed to provide reasonable assurance regarding the
achievement of objectives relating to operations, reporting, and compliance.
Compliance - (ANSWER)focuses on the data handled and stored by a company and the regulatory
requirements that apply to its protection.
Security - (ANSWER)implement effective technical controls to protect the information and technology
assets of an enterprise.
effective equation - (ANSWER)P > (D + C)
IT General Controls (ITGC) - (ANSWER)a combination of hardware, software, and manual procedures
that create an overall control environment.
IT Application controls - (ANSWER)specific controls unique to each computerized application, such as
payroll or order processing.
Identification - (ANSWER)the ability to identify uniquely a user of a system or an application that is
running in the system. date of birth, SSN, medical history
Authentication - (ANSWER)the ability to prove that a user or application is genuinely who that person or
what that application claims to be. passwords
2026-27!!
governance - (ANSWER)Governing/managing processes, technology, and systems
Risk Management - (ANSWER)Identifying (and controlling) the risks associated with processes,
technologies and systems
Compliance - (ANSWER)Adhering to the laws and regulations that govern organizations
IT Governance - (ANSWER)includes processes that inform, direct, manage, & monitor organization
activities, enabling an organization to achieve its goals.
IT Regulatory Environment - (ANSWER)Each comes with official document that details requirements for
compliance. Examples are FERPA and HIPAA
risk - (ANSWER)a measure of the potential for loss or damage when a threat exploits a vulnerability.
Standards vs Frameworks - (ANSWER)Defined very well/one way to do things vs. general guidance on
how to do something
vulnerability - (ANSWER)Weakness or flaw in an information asset/system that potentially exposes an
entity to threats.
Threat - (ANSWER)An event or condition that has the potential for causing asset loss and/or undesirable
consequences or impact.
COSO Enterprise Risk Management (ERM) - (ANSWER)process designed to identify potential events that
may affect the entity and provide reasonable assurance regarding the achievements
Hacking - (ANSWER)An attempt to gain unauthorized access to some element of a computer system
, INMT FINAL EXAM WITH COMPLETE SOLUTIONS 100% VERIFIED LATEST UPDATE
2026-27!!
Social Engineering - (ANSWER)An attack based on deceiving users or administrators at the target site
into revealing confidential or sensitive information
Malware - (ANSWER)Short for malicious software, this is software designed to infiltrate, damage or
obtain information from a computer system without the owner's consent
Internal Control - (ANSWER)A process designed to provide reasonable assurance regarding the
achievement of objectives relating to operations, reporting, and compliance.
Compliance - (ANSWER)focuses on the data handled and stored by a company and the regulatory
requirements that apply to its protection.
Security - (ANSWER)implement effective technical controls to protect the information and technology
assets of an enterprise.
effective equation - (ANSWER)P > (D + C)
IT General Controls (ITGC) - (ANSWER)a combination of hardware, software, and manual procedures
that create an overall control environment.
IT Application controls - (ANSWER)specific controls unique to each computerized application, such as
payroll or order processing.
Identification - (ANSWER)the ability to identify uniquely a user of a system or an application that is
running in the system. date of birth, SSN, medical history
Authentication - (ANSWER)the ability to prove that a user or application is genuinely who that person or
what that application claims to be. passwords
