CSC Governance, Risk Management & Policy Development

Question 1

What is the primary goal of IT governance?

Accepted Answer

To align IT with business objectives

Answer

To isolate IT from business strategy.

Answer

To control every department.

Answer

To increase internet usage.

Question 2

Which framework is commonly used in IT governance?

Accepted Answer

COBIT

Answer

PCI DSS

Answer

HIPAA

Answer

FERPA

Question 3

What is the function of risk management in cybersecurity?

Accepted Answer

To identify and reduce cybersecurity risks

Answer

To encourage risky behavior.

Answer

To ignore security policies.

Answer

To increase system downtime.

Question 4

Which term refers to acceptable risk levels in an organization?

Accepted Answer

Risk appetite

Answer

Risk avoidance

Answer

Risk transfer

Answer

Risk ignorance

Question 5

What is a policy in the context of cybersecurity?

Accepted Answer

A mandatory rule or guideline for security

Answer

An informal guideline

Answer

A personal suggestion

Answer

A marketing slogan

Question 6

Why is policy development important in cybersecurity?

Accepted Answer

To establish security standards and accountability

Answer

To confuse employees.

Answer

To increase IT budgets.

Answer

To reduce documentation.

Question 7

Which document outlines how to handle specific cybersecurity risks?

Accepted Answer

Risk Treatment Plan

Answer

Business Plan

Answer

User Manual

Answer

Budget Report

Question 8

What is the purpose of a cybersecurity policy review?

Accepted Answer

To ensure policies are updated and effective

Answer

To eliminate all policies.

Answer

To reduce training efforts.

Answer

To delete security data.

Question 9

Which factor is critical in risk prioritization?

Accepted Answer

Impact and likelihood of the risk

Answer

The name of the system.

Answer

User preferences.

Answer

Software update dates.