Cybersecurity & Risk Management Flashcards
7 cards from real TOC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Cybersecurity & Risk Management flashcards as text
Which metric is MOST useful for measuring the effectiveness of a security awareness program focused on phishing prevention?
Answer: Phishing simulation click rate over time
Tracking phishing simulation click rates over time measures actual behavioral change, which is the true outcome of awareness training.
An organization wants to ensure it can recover HR operations within 4 hours of a ransomware attack. This 4-hour target is called the:
Answer: Recovery Time Objective (RTO)
The Recovery Time Objective (RTO) defines the maximum acceptable time to restore a system or process after a disruption.
During an HR technology audit, a consultant finds that user access to the HRIS has never been reviewed since implementation three years ago. The BEST remediation is:
Answer: Conduct a formal access recertification campaign and establish a quarterly review schedule
Access recertification reviews confirm that each user's access is still appropriate, and scheduling recurring reviews prevents privilege accumulation over time.
Which type of security testing involves simulating a real-world attacker attempting to breach an organization's HR systems without prior knowledge of the internal architecture?
Answer: Black box penetration testing
Black box penetration testing simulates an external attacker with no prior knowledge, providing the most realistic assessment of external threat exposure.
A talent optimization consultant is building a cybersecurity risk culture assessment. Which factor is the STRONGEST predictor of employees following security policies?
Answer: Perceived organizational support and leadership modeling of secure behaviors
Research consistently shows that perceived organizational support and visible leadership commitment to security are the strongest drivers of employee compliance.
An organization classifies its cyber risks and finds that the cost to implement a control exceeds the expected loss from the risk. According to risk management principles, the correct action is to:
Answer: Accept the risk and document the decision
When control costs exceed expected loss, accepting the risk with documented rationale is the economically rational risk management decision.
Which HR-specific risk is MOST commonly introduced when an organization rapidly scales headcount through acquisitions?
Answer: Inconsistent access controls and inherited security vulnerabilities from acquired systems
Mergers and acquisitions frequently introduce shadow IT, inconsistent identity management, and unpatched vulnerabilities from the acquired organization's systems.