Question 16 6.5 points After completing a threat and wilnerability analysis as part of a risk assessment, the auditor recommends that in intrusion prevention system PS) be installed at the main Internet gateways and that all business units should be separated by a proxy firewall. Which of the following is the BEST method to determine whether the controls should be implemented? A cost benefit analysis Abus impact analysis A comparison of the cost of the IP and wall and the cost of the business item An annual loss expectancy calculation Question 17 (1) focuses on restoration of information systems after a disaster, where as 12 focuses on keeping the business operations running during a disaster 1 - DRP: 2-BCP 1 - BCP: 2 - DRP 1-COOP; 2 - BCP 1 - IRP: 2 - DRP 1 - DRP: 2 - BIA Question 18 What must an organization do before implementing an IT balanced scorecard? Deliver effective and efficient services. Control IT expenses. Provide business value to IT projects, Define key performance indicators. Question 16 6.5 points After completing a threat and wilnerability analysis as part of a risk assessment, the auditor recommends that in intrusion prevention system PS) be installed at the main Internet gateways and that all business units should be separated by a proxy firewall. Which of the following is the BEST method to determine whether the controls should be implemented? A cost benefit analysis Abus impact analysis A comparison of the cost of the IP and wall and the cost of the business item An annual loss expectancy calculation Question 17 (1) focuses on restoration of information systems after a disaster, where as 12 focuses on keeping the business operations running during a disaster 1 - DRP: 2-BCP 1 - BCP: 2 - DRP 1-COOP; 2 - BCP 1 - IRP: 2 - DRP 1 - DRP: 2 - BIA Question 18 What must an organization do before implementing an IT balanced scorecard? Deliver effective and efficient services. Control IT expenses. Provide business value to IT projects, Define key performance indicators