Q49. You are the lead auditor of the courier company SpeeDelivery. You have carried out a risk analysis and now want to determine your risk strategy. You decide to take measures for the large risks but not for the small risks.
What is this risk strategy called?

Q50. Which of the following does an Asset Register contain? (Choose two)

Q51. An employee caught temporarily storing an MP3 file in his workstation will not receive an IR.

Q52. What is the worst possible action that an employee may receive for sharing his or her password or access with others?

Q53. Which reliability aspect of information is compromised when a staff member denies having sent a message?

Q54. As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

Q55. Access Control System, CCTV and security guards are form of:

Q56. What is social engineering?

Q57. Often, people do not pick up their prints from a shared printer. How can this affect the confidentiality of information?

Q58. What type of compliancy standard, regulation or legislation provides a code of practice for information security?

Q59. Who are allowed to access highly confidential files?

Q60. Information or data that are classified as ______ do not require labeling.

Q61. Which is the glue that ties the triad together

Q62. There was a fire in a branch of the company Midwest Insurance. The fire department quickly arrived at the scene and could extinguish the fire before it spread and burned down the entire premises. The server, however, was destroyed in the fire. The backup tapes kept in another room had melted and many other documents were lost for good.
What is an example of the indirect damage caused by this fire?

Q63. What is the relationship between data and information?

Q64. Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?

Q65. What type of system ensures a coherent Information Security organisation?

Q66. Someone from a large tech company calls you on behalf of your company to check the health of your PC, and therefore needs your user-id and password. What type of threat is this?

Q67. Which of the following is a technical security measure?

Q68. Does the security have the right to ask you to display your ID badges and check your bags?