ICTN4040 chapter 4

A policy should state that if employees violate a company policy or any law using company technologies, the company will protect them, and the company is liable for the employee's actions.

False

A standard is a written-instruction provided by management that informs employees and others in the workplace about proper behavior.

False

Each policy should contain procedures and a timetable for periodic review.

True

Managerial control set the direction and scope of the security process and provide detailed instructions for its conduct

True

Technical controls are the tactical and technical implementations of security in the organization _____________________.

True

According to NIST SP 800-14's security principles, security should ________.

"support the mission of the organization, require a comprehensive and integrated approach, be cost effective" All of the above.

A cold site provides many of the same services and options of a hot site, but at a lower cost.

False

A managerial guidance SYSSP document is created by the IT experts in a company to God management in the implementation and configuration of technology.

False

Systems - specific security policies are organizational policies that provide detailed, targeted guidance to instruct all members of the organization in the use of a resource, such as one of its processes or technologies.

False

The I SSP is a plan which sets out the requirements that must be met by the information security blueprint or framework.

False

The global information security community has universally agreed with the justification for the code of or practices as identified in the iso/iec 17799

False

The operational plan documents the organizations intended long-term direction and efforts for the next several years.

False

In early 2014, in response to executive order 13636, and NIST published the cyber security framework, which intends to allow organizations to ______________.

Identify and Prioritize opportunities for improvement within the context of a continuous and reputable process

A service bureau is an agency that provides a service for a fee.

True

_____________ Controls address personnel security, physical security, and the protection of production inputs and outputs.

operational