Revision Questions

1. Ethics training is primarily meant for:
   1. Employees engaged in monitoring activities
   2. Employees engaged in designing training modules
   3. Employees engaged in assessing user access
   4. Employees engaged in managing the risk of the organization
2. Which of the following is influenced by an effective information security awareness program?
   1. Inherent risk
   2. Residual risk
   3. Acceptable risk
   4. Business objectives
3. The most effective way to promote a security culture is:
   1. To promote the advantages of a good security culture through influential people
   2. To increase the security budget
   3. To mandate online security training for each employee
   4. To upload the security policy on the organization's intranet
4. The area of most concern for a security manager when an organization is storing sensitive data with a third-party cloud service provider is:
   1. High cost of maintenance
   2. Unavailability of proper training to end users
   3. Unavailability of services due to network failure
   4. The possibility of disclosure...