Revision Questions

1. The most important consideration while developing an information security strategy is:
   1. The availability of information security resources
   2. Adherence to laws and regulations
   3. Effectiveness in mitigating risk
   4. Budget allocation for information security
2. The objectives of information security can be best described as:
   1. The requirements of the desired state
   2. The attributes of the current state
   3. The key business processes
   4. The control objectives for loss expectations
3. The most important factor when developing risk management strategies is:
   1. Using an industry-adopted risk assessment framework
   2. Aligning with business objectives and risk appetite
   3. Technology architecture
   4. The geographical spread of business units
4. "Systems thinking," in terms of information security, refers to:
   1. The perspective of artificial intelligence
   2. The perspective of the whole being greater than the sum of its individual parts
   3. The perspective of supporting the business objective
   4. The perspective of governance...