Based on Volume 6, 2010
Please note: In order to obtain your CPE certificate for having passed the quiz, you must turn off your pop-up blocker.
Dutta and Koritala Article
Salido Article
Hamidovic Article
Strait Article
Garber Article
CPE Quiz #
135
Based on ISACA Journal Volume 6, 2010
A passing score of 75 percent qualifies for one (1) hour of CISA/CISM/CGEIT/CRISC Continuing Professional Education (CPE) Credit
Your results will appear in a new window.
Enter your name below so it displays on the quiz results page:
Name:
Dutta and Koritala Article1. Many organizations have, or are now in the process of developing, strategies to supplement their manual and costly internal controls with automated, reliable and cost-effective controls and controls solutions to effectively mitigate risk.
2. Controls solutions that focus on only one environment ignore a true enterprise reach, failing to deliver the comprehensive solution to mitigate end-to-end risk.
3. In evaluating the organization’s commitment to enhanced products, the following factors need to be considered: the actual amount of revenue invested in product development and the number of major and minor product releases each year, including enhancements and fixes.
Salido Article4. The proposed approach to data governance for security, privacy, confidentiality and compliance calls for modifying or replacing the organization’s existing information security management systems or IT governance processes.
5. Security standards and control frameworks tend to focus primarily on protecting the overall IT infrastructure and on aligning investments in that infrastructure with the organization’s business goals.
6. Organizations should place as much emphasis on security and privacy for data that are being transferred as they do for the original data set.
7. Organizations also need to systematically evaluate whether the technologies that protect their data confidentiality, integrity and availability are sufficient to reduce risk to the lowest level.
Hamidovic Article8. In Bosnia and Herzegovina, the taxation retention period for the original application for entry into a unified system is 10 years from the date of submission of the application, while the data entered into the database in electronic form have to be kept permanently.
9. Traditionally, corporations have considered the evidentiary implications of electronic documents only when they are required for litigation, or when forensic practitioners have focused on collecting IT evidence as artifacts of an investigation.
10. ISO 15489 may help organizations plan and implement an ICT continuity strategy.
11. One way to proactively address electronic records management is to follow a standardized records management process, such as the one recommended in ISO 27001:2005.
Strait Article12. Building a business case for a records management initiative begins with providing the description of the scope of the records management initiative, along with details of the future state to be achieved at the end of the initiative.
13. A cross-disciplinary team will aid in collecting the information needed to create a business case for investing in records management.
14. Expanding how and where records management is applied is being recognized as an enabler for reducing storage costs and improving the efficiency of routine operations.
Garber Article15. Audits and separate reviews determine internal control effectiveness continuously.
16. The degree of monitoring key controls may vary based on the relative risk and value of each control.
17. Indirect information such as key performance indicators (KPIs) can provide an excellent source for determining potential indirect monitoring measures.
18. Indirect information can provide positive assurance that a control is operating effectively. |
Your results will appear in a new window.
|
Please note: This quiz requires a JavaScript-enabled browser.
If the quiz is not displayed above, you either do not have a browser which
supports JavaScript or JavaScript support has been disabled.
|
|
|