Blog

True or False? A mitigating control achieves the desired outcome and policy intent.

True or False? While shareholders are chiefly concerned with maximizing profit and maintaining a healthy stock price as a business concern, the government is concerned with consumer protection, promoting a stable economy, and maintaining a reliable source of tax revenue.

True or False? A preventive control limits the impact to the business by correcting a vulnerability.

All of the following are true of the Sarbanes-Oxley (SOX) Act, amended in 2007, except:

True or False? An enterprise view allows senior leaders to understand how risk affects the entire organization.

The SOX Act created the __________, which sets accounting and auditing standards.

There are many barriers to policy acceptance and enforcement. Which of the following is not one the challenges to policy acceptance?

True or False? In U.S. compliance laws, the intended objective of the concept of “limited use of personal data” is the practice of asking permission for how personal information can be used beyond its original purpose.

True or False? One of the foundational reasons for using and enforcing security policies is to protect systems from insider threats.

Devaki is a human resources (HR) professional. She is revising a document her company requires all new hires to sign and abide by. The document states that the employee promises not to divulge any information described in the document to a third party. What kind of document is Devaki revising?