GRC IT Governance and Cybersecurity 2

Question 1

Which COBIT 5 principle states that IT governance should address the needs of all stakeholders, not just the IT department?

Accepted Answer

Meeting stakeholder needs

Answer

Covering the enterprise end-to-end

Answer

Applying a single integrated framework

Answer

Enabling a holistic approach

Question 2

An organization wants to measure the effectiveness of its cybersecurity controls. Which metric best reflects the mean time to detect a security incident?

Accepted Answer

MTTD (Mean Time to Detect)

Answer

MTTR (Mean Time to Respond)

Answer

RTO (Recovery Time Objective)

Answer

RPO (Recovery Point Objective)

Question 3

Under NIST SP 800-53, which control family specifically addresses security planning at the organizational level?

Accepted Answer

Planning (PL)

Answer

Program Management (PM)

Answer

Risk Assessment (RA)

Answer

System and Services Acquisition (SA)

Question 4

A company's board requires quarterly cybersecurity reports. Which governance artifact best satisfies this requirement?

Accepted Answer

Security scorecard with KPIs and KRIs

Answer

Penetration test technical report

Answer

Vulnerability scan raw output

Answer

Security operations runbook

Question 5

Which IT governance framework is specifically designed for IT service management and aligns IT services with business needs?

Accepted Answer

ITIL

Answer

COBIT

Answer

ISO 27001

Answer

TOGAF

Question 6

In cybersecurity governance, what does a 'tone at the top' primarily influence?

Accepted Answer

Security culture and employee behavior

Answer

Technical firewall configurations

Answer

Patch management schedules

Answer

Network segmentation design

Question 7

Which document formally defines the cybersecurity responsibilities of third-party vendors and their obligations to protect organizational data?

Accepted Answer

Third-Party Risk Management Agreement / Vendor Contract

Answer

System Security Plan (SSP)

Answer

Business Impact Analysis (BIA)

Answer

Continuity of Operations Plan (COOP)