← Back to exam page

712-50 – EC-Council Certified CISO (CCISO)

Loading demo links...

Showing 16–18 of 20 questions

Question 16

Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

Select an option, then click Submit answer.

  • ○

    Information Security (IS) procedures often require augmentation with other standards
  • ○

    Implementation of it eases an organization’s auditing and compliance burden
  • ○

    It provides for a consistent and repeatable staffing model for technology organizations
  • ○

    It allows executives to more effectively monitor IT implementation costs
Question 17

How often should the Statements of Standards for Attestation Engagements-16 (SSAE16)/International Standard on Assurance Engagements 3402 (ISAE3402) report of your vendors be reviewed?

Select an option, then click Submit answer.

  • ○

    Annually
  • ○

    Quarterly
  • ○

    Bi-annually
  • ○

    Semi-annually
Question 18

A severe security threat has been detected on your corporate network. As CISO you quickly assemble key members of the Information Technology team and business operations to determine a modification to security controls in response to the threat.

This is an example of:

Select an option, then click Submit answer.

  • ○

    Change management
  • ○

    Thought leadership
  • ○

    Business continuity planning
  • ○

    Security Incident Response