ISSMP®: Information Systems Security Management Professional v6.0

Which of the following types of evidence is considered as the best evidence?

What are the purposes of audit records on an information system? Each correct answer represents a complete solution. Choose two.

Which of the following refers to an information security document that is used in the United
States Department of Defense (DoD) to describe and accredit networks and systems?

Which of the following analysis provides a foundation for measuring investment of time, money and human resources required to achieve a particular outcome?

A contract cannot have provisions for which one of the following?

Your company is covered under a liability insurance policy, which provides various liability coverage for information security risks, including any physical damage of assets, hacking attacks, etc. Which of the following risk management techniques is your company using?

You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign for your employees. One of the employees of your organization asks you the purpose of the security awareness, training and education program. What will be your answer?

You are responsible for network and information security at a metropolitan police station.
The most important concern is that unauthorized parties are not able to access data. What is this called?

What component of the change management system is responsible for evaluating, testing, and documenting changes created to the project scope?

Electronic communication technology refers to technology devices, such as computers and cell phones, used to facilitate communication. Which of the following is/are a type of electronic communication? Each correct answer represents a complete solution. Choose all that apply.

You are the project manager of the HJK project for your organization. You and the project team have created risk responses for many of the risk events in the project. A teaming agreement is an example of what risk response?

Which of the following acts is a specialized privacy bill that affects any educational institution to accept any form of funding from the federal government?

Which of the following steps is the initial step in developing an information security strategy?

Which of the following statements about the integrity concept of information security management are true? Each correct answer represents a complete solution. Choose three.