CSM Regulatory Compliance & Governance 3

Question 1

Which ISO standard provides a framework specifically for information security management systems (ISMS)?

Accepted Answer

ISO 27001

Answer

ISO/IEC 27001 is the international standard for establishing, implementing, maintaining, and continually improving an ISMS.

Question 2

Under the California Consumer Privacy Act (CCPA), which right allows consumers to request that a business stop selling their personal information?

Accepted Answer

Right to Opt-Out

Answer

The Right to Opt-Out under CCPA (Section 1798.120) allows consumers to direct businesses to stop selling their personal information.

Question 3

A software manager must ensure audit trails are tamper-evident. Which technical control best supports this governance requirement?

Accepted Answer

Cryptographic hashing and write-once log storage

Answer

Cryptographic hashing combined with write-once (WORM) storage makes audit logs tamper-evident by detecting any unauthorized modification.

Question 4

In a software governance context, what does 'separation of duties' primarily prevent?

Accepted Answer

Single individuals from having unchecked control over critical processes

Answer

Separation of duties (SoD) ensures no single person can control all aspects of a critical process, reducing fraud and error risk.

Question 5

Which regulatory framework is mandatory for U.S. federal information systems and establishes minimum security requirements based on system impact levels?

Accepted Answer

FISMA/NIST SP 800-53

Answer

FISMA (Federal Information Security Modernization Act) mandates compliance with NIST SP 800-53 security controls for all U.S. federal information systems.

(CSM) Certified Software Manager Practice Test

(CSM) Certified Software Manager Practice Test

CSM Regulatory Compliance & Governance 3