Author: Anonymous

The difference between a flat and hierarchical organization is relative to its __________ and _________.

Which of the following has the responsibilities of directing policies and procedures designed to protect information resources, identifying vulnerabilities, and developing a security awareness program?

True or False? A key measurement of an organization’s risk appetite is its ability to dispose of risk.

True or False? Possible sources of motivation include pride, self-interest, fear, desire, and success.

True or False? In general, matrix relationships are created with control partners.

In order to be thoughtful about the implementation of security policies and controls, leaders must balance the need to reduce __________ with the impact to the business operations. Doing so could mean phasing security controls in over time or be as simple as aligning security implementation with the business’s training events.

True or False? The term “apathy” refers to indifference and lack of motivation.

True or False? In an organizational structure, the stakeholders in the line of business are focused on effective comprehensive assurance policies.

True or False? In general, implementing security policies occurs in isolation from the business perspectives and organizational values that define the organization’s culture.

It is important for an organization to determine how it wants to manage __________, which means how to group various tasks, and __________, which relates to the number of layers and number of direct reports found in an organization.