$16.$ Which statement is correct regarding offshoring?

Select one:

a$.$

The offshore team should deal with change throughout the life of the contract.

b$.$

The transition process provides the contingency plans to cope with serious problems, which arise during the term of a contract.

c$.$

The change is one of the elements that could be explicit in the selection process.

d$.$

Partnering help to overcome linguistic and cultural barriers and risks, which are all part of offshore outsourcing.

$17.$ Why is it important to have security metrics?

i$)$ It provides an early warning of potential security hotspots, known as a lagging indicator.

ii$)$ An information security incident may cause an organisation to fail to meet the requirements set by legislation.

iii$)$ It demonstrates the organisation's stakeholders the effectiveness of the information security programme.

iv$)$ They are linked to the risk register and business impact analysis.

Choose the correct combination.

Select one:

a$.$

i$,$ iii, iv

b$.$

i$,$ ii$,$ iii

c$.$

ii$,$ iii, iv

d$.$

i$,$ ii$,$ iii, iv

$18.$ Which vulnerabilities are associated with the roles of deliberate, accidental and unintended actions?

Select one:

a$.$

People

b$.$

Technology

c$.$

Governance

d$.$

Process

$19.$ In the beginning, information security was integrated into the IT function and seen as a$/$an $...$ role.

Select one:

a$.$

software testing

b$.$

help desk

c$.$

operations support

d$.$

technical

$20.$ What were the lessons learnt from the BP Deepwater Horizon disaster?

i$)$ Do not hide the truth and be transparent.

ii$)$ Be straight with the media.

iii$)$ Recognise where trust lies and do not breach it$.$

iv$)$ Have a coherent communications policy.

Choose the correct combination.

Select one:

a$.$

i$,$ iii, iv

b$.$

i$,$ ii$,$ iii, iv

c$.$

i$,$ iii

d$.$

i$,$ ii$,$ iv