资源描述：
《security management》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。
1、SecurityManagement1.WhichoneofthefollowingisNOTaclassificationofplanningbasedontheplanninghorizon?a.Strategicplanning.b.Operationalplanning.c.Institutionalplanning.d.Tacticalplanning.Answer:c.2.ThepreliminarystepstosecurityplanningincludeallofthefollowingEXCEPTa.establishobjectives.b.
2、listplanningassumptions.c.establishasecurityauditfunction.d.determinealternatecoursesofactionAnswer:c.3.Whichofthefollowingisakeyelementduringtheinitialsecurityplanningprocess?a.Establishsystemreviewtimeframesb.Implementasecurityawarenessprogramc.Definingreportingrelationshipsd.Instit
3、uteachangemanagementprogramAnswer:cReference:HandbookofInformationSecurityManagement,editedbyRuthbergandTipton,Auerbach,1993,pg754.WhichofthefollowingisNOTanelementofasecurityplanningmissionstatement?a.Objectivesstatementb.Backgroundstatementc.Scopestatementd.ConfidentialitystatementA
4、nswer:dReference:HandbookofInformationSecurityManagement,editedbyRuthbergandTipton,Auerbach,1993,page735.Whichofthefollowingisanobjectiveofeverylosspreventionprogram?a.Be100%effectiveinpreventinglosses.b.Permitlossesthataren'tveryimportant.c.Reducelossestoapre-definedleveloftolerablen
5、ess.d.Reducelossestowithin10%ofapre-definedlevel.Answer:c.6.Indataprocessingsystems,thevalueanalysisshouldbeperformedintermsofwhichthreepreperties?a.Profit,loss,ROIb.Intentional,accidental,naturaldisasterc.Assets,personnel,servicesprovidedd.Availability,integrity,confidentialityAnswer
6、:d.Reference:InformationSystemsSecurity;Fites&Kratz;ThompsonPress;1996;pg54.Discussion:Answera-incorrect-appliestobusinessmanagement.Answerb-incorrect-appliesdirectlytothreatanalysis.Answerc-incorrect-consideredinbusinessimpactanalysis.Answerd-correct-valueanalysisreferstotheavailabil
7、ityoftheservices.Keepingthedataaccurate,completeandauthentic,andkeepingprivatedataprivate.7.WhichofthefollowingrepresentsanALEcalculation?a.GrosslossexpectancyXlossfrequency.b.AssetvalueXlossexpectancy.c.Totalcostofloss+actualreplacementvalue.d.SinglelossexpectancyXannualizedrateofocc
8、urren
