Role of the Information Security Manager

A multinational organization is required to follow governmental regulations with different security requirements at each of its operating locations. The chief information security officer (CISO) should be MOST concerned with: Developing a security program that meets global and regional requirements. Ensuring effective communication with local regulatory bodies. Monitoring compliance with defined security policies and standards. Using industry best practice to met local legal regulatory requirements.

Which of the following BEST enables the design of an effective incident escalation process?. A well-defined organizational hierarchy. Enforceable control baselines. A comprehensive risk register. Controls designed for defense in depth.

An information security manager has been notified that two senior executives have the ability to elevate their own privileges in the corporate accounting system, in violation of policy. What is the FIRST step to address this issue?. Notify the CISO of the security policy violation. Perform a system access review. Perform a full review of all system transactions over the past 90 days. Immediately suspend the executives’ access privileges.

Which of the following roles is BEST able to influence the security culture within an organization?. Chief information security officer (CISO). Chief information officer (CIO). Chief operating officer (COO). Chief executive officer (CEO).