Compliance and Auditing Regulatory Frameworks

Question 1

Which US federal law requires public companies to establish internal controls over financial reporting?

Accepted Answer

Sarbanes-Oxley Act (SOX)

Answer

Gramm-Leach-Bliley Act

Answer

Dodd-Frank Act

Answer

Securities Exchange Act

Question 2

Which regulation governs the protection of personal health information in the United States?

Accepted Answer

HIPAA

Answer

FERPA

Answer

COPPA

Answer

GLBA

Question 3

The Payment Card Industry Data Security Standard (PCI DSS) is maintained by which organization?

Accepted Answer

PCI Security Standards Council

Answer

Federal Reserve

Answer

NIST

Answer

Department of Treasury

Question 4

Which US law requires financial institutions to protect consumers' personal financial information?

Accepted Answer

Gramm-Leach-Bliley Act (GLBA)

Answer

HIPAA

Answer

SOX

Answer

CAN-SPAM Act

Question 5

NIST SP 800-53 provides security and privacy controls for which type of organizations?

Accepted Answer

Federal information systems and organizations

Answer

Private sector corporations only

Answer

International banks

Answer

Healthcare providers only

Question 6

Which framework is commonly used by US organizations to assess and improve cybersecurity risk management?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

ISO 27001

Answer

COBIT 5

Answer

ITIL v4