Quiz 89 

 

 

Please note: In order to obtain your CPE certificate for having passed the quiz, you must turn off your pop-up blocker.

Ataya Article
Finne Article
Schreider Article
Zawada and Schwartz Article
Doughty Article
Brancik Article

 

CPE Quiz # 89

Based on Information Systems Control Journal Volume 2, 2003

A passing score of 75 percent qualifies for one (1) hour of CISA/CISM/CGEIT Continuing Professional Education (CPE) Credit

Your results will appear in a new window.

Enter your name below so it displays on the quiz results page:

Name:

Ataya Article

1. According to the author, Gartner recommends that organizations evaluate IT infrastructure projects solely on derived internal rates of return (RRT) or other return on investment (ROI) measures.
2. As a whole, the IT profession does a very good job of identifying the value of IT spending, such that business managers clearly understand their IT cost allocations and the value of IT investments.

Finne Article

3. Positive aspects of research and development (R&D) collaboration include flexibility, speed and reliability. Negative aspects include the loss of control, potential communication issues and difficulties in project management.
4. In a typical R&D collaboration, there are fewer than 100 risks that need to be managed-most relate to the finance, legal and sourcing phases of collaboration.
5. Activities that may reduce risks in R&D collaboration include clearly defining collaboration requirements in a memorandum of understanding, documenting scope changes in writing and using audit trails.

Schreider Article

6. Worldwide revenue for risk management software for 2003 is projected at US $350 million. Some leading vendors include Insight Consulting, RiskWatch, CSCI and Norman Security Solutions.
7. These products adhere to one or more industry-accepted risk standard, such as HIPAA, BS7799 and ISO. Each product has a customized and proprietary way to calculate annual loss expectancy, an important feature that is recommended by the author.
8. These risk management products are differentiated primarily by their reporting modules, in that there are a variety of canned and tailored charts and reports that each program features.

Zawada and Schwartz Article

9. Control frameworks and regulatory standards with guidelines for business continuity management (BCM) include HIPAA, COBIT, NIST and FERC.
10. An important step in a BCM program is the identification of individuals with the formal authority to declare a disaster. These individuals are responsible for implementing the contingency strategies identified in a BCM plan.

Doughty Article

11. The article describes a case study of an organization that implemented an enterprise security framework across a large geographic area. The first action taken was the appointment of a dedicated resource for data security.
12. Challenges in the security environment within the organization profiles in the case study include no approved security policies, no awareness program, no e-mail or URL filtering, and no IDS system.
13. A project task in the enterprise security implementation was an IT asset inventory. Management was somewhat surprised to find that 47 percent fewer PCs were physically at the organization than their asset records suggested. The author believes that asset theft by contractors was the cause of the shortfall.

Brancik Article

14. The computer forensics and cybersecurity governance model described in the article combines a mix of prevention and detective controls to implement improved processes.
15. US federal legislation that directly impacts computer forensics includes: the USA Patriot Act, Computer Security and Privacy Act of 1987, and the Gramm-Bliley's Homeland Security Advisory Program.
16. A padded cell is a type of preventive control that often is used by computer incident response teams. These controls involve using dedicated hosts that bait intruders with what is presumed to be attractive data and information.

Your results will appear in a new window.

Please note: This quiz requires a JavaScript-enabled browser. If the quiz is not displayed above, you either do not have a browser which supports JavaScript or JavaScript support has been disabled.