An enterprise has identified a number of plausible risk scenarios that could result in economic loss associated with major IT investments. Which of the following is the BEST method to assess the risk?

1. A. Cost-benefit analysis
2. B. Qualitative analysis
3. C. Business impact analysis (BIA)
4. D. Quantitative analysis

Correct Answer: C

An enterprise wants to address the human factors of social engineering risk within the organization. From a governance perspective, which of the following is the BEST way to mitigate this risk?

1. A. Distribute the social media information security policy to staff.
2. B. Mandate annual security awareness training.
3. C. Restrict access to social media.
4. D. Mandate security requirements be included in employee contracts.

Correct Answer: B

Which of the following is MOST important for an enterprise to review when classifying information assets?

1. A. Procedures for information handling
2. B. Requirements for information retention.
3. C. Media used for storage and backup
4. D. Impact of information exposure

Correct Answer: D

An enterprise is evaluating a Software as a Service (SaaS) solution to support a core business process. There is no outsourcing governance or vendor management in place. What should be the CEO's FIRST course of action?

1. A. Ensure the roles and responsibilities to manage service providers are defined.
2. B. Establish a contract with the SaaS solution provider.
3. C. Instruct management to use the standard procurement process.
4. D. Ensure the service level agreements (SLAs) for service providers are defined.

Correct Answer: A