Quiz 97 

 

 

Please note: In order to obtain your CPE certificate for having passed the quiz, you must turn off your pop-up blocker.

Drake and Jeschke Article
Wright Article
Thorp Article
Kenny Article
Welu Article
Heschl Article
Robb Article
Vanamali Article

 

CPE Quiz # 97

Based on Information Systems Control Journal Volume 4, 2004

A passing score of 75 percent qualifies for one (1) hour of CISA/CISM/CGEIT Continuing Professional Education (CPE) Credit

Your results will appear in a new window.

Enter your name below so it displays on the quiz results page:

Name:

Drake and Jeschke Article

1. Committee of Sponsoring Organizations (COSO) has published its enterprise risk management framework, as its formal IT governance framework to be used by US public companies reporting under Sarbanes-Oxley.

Wright Article

2. California recently passed legislation that requires the holders of personal electronic information about a California resident to notify the resident if the holder has reason to believe that the security of the data has been compromised.
3. Data compromises affected by this legislation have affected Wells Fargo and Citibank, among others, causing hard monetary costs and generating negative publicity.

Thorp Article

4. Perceived advantages to implementing ISO17799, according to the author, include providing the tools and methods to make management responsible for implementing an effective information security program and instilling discipline through an orderly framework of risk management.

Kenny Article

5. The US has a sufficient level of protection for personal data in accordance with the European Union Directive, through its national implementation of the 2000 Safe Harbor provision.

Welu Article

6. Sarbanes-Oxley compliance is a subset of operational risk, and is forcing companies to reconsider internal controls and processes for a variety of reasons.
7. COSO provides a framework for enterprise risk management that is incorporated by name and reference in the Sarbanes-Oxley legislation as a best practice for implementing internal controls.

Heschl Article

8. COBIT was recently mapped against other international IT standards and guidance, including COSO, ITIL, ISO17799 and NIST-800-14.
9. NIST-800-14 is primarily targeted at parties responsible for IT security at governmental organizations. Like COBIT, it is available for electronic download at no cost.

Robb Article

10. Event log managers are a type of information security software that gathers log information from multiple locations into a single system and reduces them to essentials. Examples of commercial ELMs include Syslog's SNMP, MySQL databases and Logalot.

Vanamali Article

11. An identity management framework should consider issues related to audit, compliance and monitoring, encryption, nonrepudiation and single sign-on, among its goals and strategies.
12. Key identity management components can include directory services, user provisioning, authentication services, portal services and access management infrastructure.

Your results will appear in a new window.

Please note: This quiz requires a JavaScript-enabled browser. If the quiz is not displayed above, you either do not have a browser which supports JavaScript or JavaScript support has been disabled.