CSD – Assessment Test – Information Security: Module 3. Significance of Information Security

Why is protecting information systems critical for modern organizations?

What type of sensitive information is typically managed by information systems?

Unauthorized access or data breaches can lead to significant risks that include:

Significant business disruptions can occur due to which types of events?

What types of threats are considered one of the greatest challenges to information system security?

Cybercriminal methods evolve to exploit weaknesses in which areas?

What is ransomware specifically designed to do?

Phishing schemes are meant to deceive employees into:

SQL injection attacks target what component within an organization’s systems?

What cybersecurity measure helps monitor network activity for suspicious activities?

Regular employee training on secure online practices primarily helps prevent:

Compliance with legal regulations helps organizations avoid:

10. What is the primary goal of the General Data Protection Regulation (GDPR)?

10. According to GDPR principles, how should organizations handle personal data?

In case of a da breach under GDPR regulations, businesses are required to notify relevant authorities within what timeframe?

Data Protection Impact Assessments (DPIAs) aim to evaluate risks related to which type of activities?

What is the primary purpose of the Health Insurance Portability and Accountability Act (HIPAA)?

 To whom does HIPAA primarily apply?

Under the CCPA’s non-discrimination clause, businesses cannot do which one?               

A key requirement within PCI DSS calls for which type(s) safeguards against unauthorized access?

 What is the primary focus of the Federal Information Security Modernization Act (FISMA)?

Under FISMA, what type of approach must federal agencies adopt?

What is required from agencies before they deploy an information system according to FISMA?

The Sarbanes-Oxley Act primarily targets which type of companies?

What key requirement does SOX impose concerning internal controls?

Under SOX, audit trails must be established for what purpose?        

How long are organizations required to retain financial records according to SOX?

ISO/IEC 27001:2013 provides a framework centered around what management topic?