GRC Fundamentals Challenge

Test

Parties jouées 0

Créer une copie

À propos de cette activité

GRC concepts and standards quiz

Créé par

ciera

United States

Téléchargez la version pour jouer sur papier

Top 10 résultats

Il n'y a toujours pas de résultats pour ce jeu. Soyez le premier à apparaître dans le classement! Connectez-vous pour vous identifier.

Créez votre propre jeu gratuite à partir de notre créateur de jeu

Affrontez vos amis pour voir qui obtient le meilleur score dans ce jeu

Créer un défi

		%
	Anonyme	%
		%
		%

Imprimez votre jeu

GRC Fundamentals Challenge


GRC Fundamentals ChallengeVersion en ligne GRC concepts and standards quiz par ciera 1 Which standard is described as a framework for establishing an Information Security Management System (ISMS) with a risk-based approach? a NIST SP 800-53 b ISO 27001 c PCI DSS d SOC 2 2 What is the main purpose of Dora in the EU framework? a Harmonize and regulate cross-sector digital resilience and reporting b Limit cross-border data flow c Increase merchant fees d Replace ISO 27001 3 Which of the following is a key element of a risk assessment as outlined in the GRC course content? a Ignore past incidents b Only assess IT assets c Assume minimal risk across all units d Identify risk hotspots and prioritize by impact and likelihood 4 SOC 2 focuses on which five trust services criteria? a Confidentiality, Integrity, Access Control, Availability, Compliance b Security, Availability, Reliability, Privacy, Auditing c Authentication, Accessibility, Data Retention, Compliance, Governance d Security, Availability, Processing Integrity, Confidentiality, Privacy 5 What is the difference between Annex A and ISO 27002 as described in the materials? a Annex A is for privacy; ISO 27002 is for physical security b Annex A provides implementation steps; ISO 27002 is high-level c Annex A lists objectives; ISO 27002 provides detailed control guidance d Annex A and ISO 27002 are unrelated standards 6 Which framework is noted for requiring incident reporting to authorities within 24 hours in supply chains? a Dora (EU Digital Operational Resilience Act) b PCI DSS c ISO 27001 d SOC 2 7 In governance, what role does ISO 27001 suggest embedding within leadership to sustain ISMS efforts? a Junior staff ownership b Only IT department handles it c Senior leadership commitment and a CSO/lead security role d No leadership involvement 8 Which regulatory concept is described as ensuring consistency of security controls across supplier networks? a Third-party/vendor management and due diligence b Internal audit alone c Customer privacy law d Market regulation only 9 What is a primary purpose of a risk register in ISO 27001 contexts? a Document risks, owners, and treatment plans to guide improvements b Replace the risk assessment c Automate all controls d Store personal data 10 Which two major player standards are described as complementary for information security controls? a PCI DSS and SOC 2 b ISO 27001 and ISO 27002 c NIST 800-53 and COBIT d HIPAA and GDPR

Vous pouvez intégrer le jeu dans un LMS compatible avec LTI 1.1 ou LTI 1.3 comme Canvas, Moodle ou Blackboard. Les scores seront ainsi automatiquement enregistrés dans le carnet de notes de la plateforme.

GRC Fundamentals Challenge

Test

À propos de cette activité

Créé par

Téléchargez la version pour jouer sur papier

Top Jeux

Test

UPS 5 Seeing Habits Quiz

Test

Practice Quiz - Punnett Square, Variation, and Mutations

Test

Tissues - Practice Quiz

Test

Spanish Alphabet Listening

Test

Photosynthesis vs Cellular Respiration - Practice Quiz

GRC Fundamentals ChallengeVersion en ligne

par ciera

Which standard is described as a framework for establishing an Information Security Management System (ISMS) with a risk-based approach?

What is the main purpose of Dora in the EU framework?

Which of the following is a key element of a risk assessment as outlined in the GRC course content?

SOC 2 focuses on which five trust services criteria?

What is the difference between Annex A and ISO 27002 as described in the materials?

Which framework is noted for requiring incident reporting to authorities within 24 hours in supply chains?

In governance, what role does ISO 27001 suggest embedding within leadership to sustain ISMS efforts?

Which regulatory concept is described as ensuring consistency of security controls across supplier networks?

What is a primary purpose of a risk register in ISO 27001 contexts?

Which two major player standards are described as complementary for information security controls?