According to ITU-T X.1054, security governance is best defined as:
The system by which an organisation's information security activities are directed and controlled
Oops!
Check
Okay!
Check
25
What makes SABSA different from a purely technology-led approach to security architecture?
SABSA is risk-driven and starts from business requirements, ensuring security architecture is not a technical afterthought.
Oops!
Check
Okay!
Check
15
List any of the elements that a well-crafted Acceptable Use Policy should cover.
(1) permitted uses of organisational systems; (2) prohibited uses of systems; (3) internet and email usage rules; (4) data handling requirements; (5) consequenc
Oops!
Check
Okay!
Check
15
What model can be used to identify/classify a threat?
STRIDE
Oops!
Check
Okay!
Check
baam
Lose 10 points!
Oops!
star
Double points!
Okay!
shark
Other team loses 15 points!
Okay!
baam
Lose 20 points!
Oops!
10
Once a security policy is approved, it does not need to be reviewed unless a major security incident occurs
Policies must be reviewed regularly as the threat landscape, regulations, business environment, and technology change
Oops!
Check
Okay!
Check
15
In the Zachman framework applied to security, which dimension addresses "Who has access to what?"
Who (People)
Oops!
Check
Okay!
Check
10
Which body is primarily responsible for security governance in an organisation?
The board and executive leadership
Oops!
Check
Okay!
Check
20
Describe ONE key difference between the role of the CRO and the role of the CISO.
CRO manages enterprise-wide risk across all business functions;The CISO focuses specifically on the information security programme and strategy
Oops!
Check
Okay!
Check
10
Mention any typical component of a strategic security plan?
A strategic security plan covers mission/vision, risk profile, current/target state, roadmap, and success metrics â all strategic
Oops!
Check
Okay!
Check
heart
Other team wins 25 points!
Oops!
gift
Win 25 points!
Okay!
fairy
Take points!
5
10
15
20
25
baam
Lose 5 points!
Oops!
baam
Lose 15 points!
Oops!
star
Double points!
Okay!
shark
Other team loses 10 points!
Okay!
baam
Lose 15 points!
Oops!
10
What is the primary responsibility of the CISO?
Leading the security programme and owning security strategy
