Exam (elaborations) Operational security quiz 2 solved

Exam (elaborations) Operational security quiz 2 solved Free Question: Please mark TRUE Selected Answer: Tru e Answers: Tru e False • Question 2 The struggle between how to manage a business versus how to “grow” has significant implications for security policies that must reflect the core values of the business. Which of the following statements reflects one of the security policy approaches often taken by entrepreneurs growing a business? Selected Answer: A company in high-growth mode focuses on agility and innovation and tends to have a greater acceptance of risk. Answers: A company in its early startup stages focuses on stability and seeks to avoid risk. A company starts growing its bureaucracy as early in its development as possible. A company in its startup stages often hires professional managers and defers to their judgment about how to create the business culture. A company in high-growth mode focuses on agility and innovation and tends to have a greater acceptance of risk. • Question 3 In order to be thoughtful about the implementation of security policies and controls, leaders must balance the need to reduce with the impact to the business operations. Doing so could mean phasing security controls in over time or be as simple as aligning security implementation with the business’s training events. Selected Answer: risk Answers: costs productivi ty risk data storage • Question 4 In a large organization, the complexity required to keep operations running effectively requires a hierarchy of specialties. Thus, which of following organizational structures is preferred? Selected Answer: hierarchical organizational structure Answers: flat organizational structure matrix relationship structure hierarchical organizational structure change agent structure • Question 5 Apathy can have detrimental effects on information security. Engaged communication is one strategy that can be implemented to overcome the effects of apathy. Which of the following statements further elaborates this strategy? Selected Answer: Adjust the implementation strategy to better explain the importance of the policy within the context of the individual role. Answers: Continually reinforce the message of the value and importance of information security. Compliance must be monitored and individuals held accountable. Adjust the implementation strategy to better explain the importance of the policy within the context of the individual role. Seek opportunity to spotlight individuals who model the desired behavior. • Question 6 In a hierarchical organization, there are a large number of touch points and personalities that must be engaged to successfully implement a security policy. As the number of touch points increases, the number of complex also increases between stakeholders. Selected Answer: executives Answers: security liaisons matrix relationships executives control partners • Question 7 Implementing security policy means continuous communication with and ensuring transparency about what’s working and what’s not working. Selected Answer: stakeholders Answers: control partners