Question 1:
Risk analysis helps companies prioritize their risks and shows management the amount of money that must be applied to protecting against those risks in sensible manner. Risk analysis has four major goals.
(a) What are the 4 major goals?
(b) Discuss the 4 major goals
(c) What are the main objectives and aims of a risk analysis?
Question 2:
The Board is ultimately liable and accountable for management of all facets of the business and consequently for ensuring that the risk management and treatment that is in place is adequate. What should the duties of Board?
Question 3:
Using a real life scenario or context, list and set the scene for at least four merits that an organized incident response program promotes.
Question 4:
You arrive at work a few minutes early one day. As you walk past a few of open employee cubicles, you notice several of the IT staff viewing unsuitable images on their monitors. You also notice that an employee seems offended and upset about it. Could this scenario lead to the formation of a computer security incident response team? What corporate entities (Human Resources, Public Affairs, and so forth.) would need to be involved in the response?
Question 5:
How does your interview of a manager diverge from discussing incidents with system administrator?