Which of the following is the BEST way to help ensure an organization's risk appetite will be considered as part of the risk treatment process?

1. A. Establish key risk indicators (KRIs).
2. B. Use quantitative risk assessment methods.
3. C. Provide regular reporting on risk treatment to senior management
4. D. Require steering committee approval of risk treatment plans.

Correct Answer: D

Which of the following is the BEST course of action for an information security manager to align security and business goals?

1. A. Conducting a business impact analysis (BIA)
2. B. Reviewing the business strategy
3. C. Defining key performance indicators (KPIs)
4. D. Actively engaging with stakeholders

Correct Answer: D

Which of the following is the PRIMARY objective of incident triage?

1. A. Coordination of communications
2. B. Mitigation of vulnerabilities
3. C. Categorization of events
4. D. Containment of threats

Correct Answer: C
Incident triage is the process of quickly assessing an incident and determining its severity in order to prioritize the response. This involves categorizing the events based on their potential impact, which helps to determine the right response and the most effective use of resources. It also helps to identify potential threats and vulnerabilities, and to coordinate communications and response activities.

A security incident has been reported within an organization. When should an inforrnation security manager contact the information owner? After the:

1. A. incident has been confirmed.
2. B. incident has been contained.
3. C. potential incident has been logged.
4. D. incident has been mitigated.

Correct Answer: A

Which of the following BEST indicates the effectiveness of a recent information security awareness campaign delivered across the organization?

1. A. Decrease in the number of security incidents
2. B. Increase in the frequency of security incident escalations
3. C. Reduction in the impact of security incidents
4. D. Increase in the number of reported security incidents

Correct Answer: A