Framework, Regulation, or Standard? Quiz

Froggy Jumps

Parties jouées 0

Créer une copie

À propos de cette activité

Identify governance terms and examples

Créé par

ciera

United States

Téléchargez la version pour jouer sur papier

Top 10 résultats

Il n'y a toujours pas de résultats pour ce jeu. Soyez le premier à apparaître dans le classement! Connectez-vous pour vous identifier.

Créez votre propre jeu gratuite à partir de notre créateur de jeu

Affrontez vos amis pour voir qui obtient le meilleur score dans ce jeu

Créer un défi

		%
	Anonyme	%
		%
		%

Imprimez votre jeu

Framework, Regulation, or Standard? Quiz


Froggy Jumps Framework, Regulation, or Standard? QuizVersion en ligne Identify governance terms and examples par ciera 1 What is a standard in information security, as described in ISO/IEC 27001 context? a A defined set of controls and requirements to achieve a security objective b A mandatory legal rule issued by a government c A company-specific policy with no formal endorsement 2 Which term best fits a globally agreed set of practices that organizations can implement to manage risk? a Regulation b Framework c Standard 3 DORA is an example of what, in the transcript? a Framework b Regulation c Standard 4 ISO 27,001 is described as what kind of mechanism for information security? a A framework for a management system (ISMS) b A single product certification c A legal binding regulation 5 What does ISO 27,002 provide in relation to 27,001? a Guidance for implementing and managing information security controls b Official certification service c Financial audit standards 6 Which standard is described as a baseline for protecting cardholder data in payments? a PCI DSS b ISO 27001 c NIST CSF 7 SOC 2 focuses on which set of criteria? a Financial reporting only b Physical safety and environmental controls c Security, Availability, Processing Integrity, Confidentiality, and Privacy 8 Which document is aimed at incident handling guidance for computer security incidents? a PCI DSS 4.0 b ISO 22301 c SP 800-61 (Computer Security Incident Handling Guide) 9 What is Dora primarily concerned with across supply chains? a Holistic cyber risk management and incident reporting b Blocking all third-party access c Only internal IT systems 10 What is the relationship between Annex A and ISO 27,001:2022 27,002? a Annex A is the certification body; 27,002 is the audit standard b Annex A is optional; 27,002 replaces it c Annex A lists objectives; 27,002 provides implementation guidance 11 What is the first step in a risk assessment for information assets per ISO 27001 guidance? a Interview only senior management. b Identify information assets and owners. c Define risk appetite before assets. 12 In a data/model risk assessment, which stakeholder question is most critical to align the model with business aims? a What is the IT budget for the year? b What business objectives rely on this data/model? c Which employees access this data daily? 13 How should risks be prioritized during the assessment? a Alphabetically by data source name. b Based on likelihood and potential impact. c By the size of the data set only. 14 Which aspect of data is essential to gather before risk treatment for an insurance model? a The marketing department’s goals. b The model’s color scheme. c Data lineage and data quality. 15 What is the purpose of the risk register in an ISMS? a A list of all vendors only. b Central inventory to track risks and treatment plans. c A log of user passwords. 16 Which contracting practice helps manage third-party risk in insurance data projects? a Only require annual invoices. b Include data security, privacy, and audit rights in contracts. c Exclude security clauses to speed procurement. 17 How often should risk assessments be performed under ISO 27k01 guidance? a Only once at project start. b Every five years. c Annually or after major changes. 18 What should a risk treatment plan explicitly specify besides mitigations? a The company holiday schedule. b Risk ownership and acceptance criteria. c The internal email protocol. 19 Which regulatory/data privacy considerations are crucial in an insurance data/model risk review? a Compliance with applicable laws and data privacy requirements. b Ignoring regional rules to speed up models. c Relying only on internal policies. 20 What’s a best practice for communicating risk findings to executives and the board? a Present only qualitative anecdotes. b Use dashboards with risk status, trends, and actions. c Show raw asset inventories with no context.

Vous pouvez intégrer le jeu dans un LMS compatible avec LTI 1.1 ou LTI 1.3 comme Canvas, Moodle ou Blackboard. Les scores seront ainsi automatiquement enregistrés dans le carnet de notes de la plateforme.

Framework, Regulation, or Standard? Quiz

Froggy Jumps

À propos de cette activité

Créé par

Téléchargez la version pour jouer sur papier

Top Jeux

Froggy Jumps

Phlebotomy Order of Draw Quiz

Froggy Jumps

Ethos, Pathos, and Logos Quiz

Froggy Jumps

Bill of Rights Game - The Constitutionalist

Froggy Jumps

pizza

Froggy Jumps

The Integumentary System

Froggy Jumps

Framework, Regulation, or Standard? QuizVersion en ligne

par ciera

What is a standard in information security, as described in ISO/IEC 27001 context?

Which term best fits a globally agreed set of practices that organizations can implement to manage risk?

DORA is an example of what, in the transcript?

ISO 27,001 is described as what kind of mechanism for information security?

What does ISO 27,002 provide in relation to 27,001?

Which standard is described as a baseline for protecting cardholder data in payments?

SOC 2 focuses on which set of criteria?

Which document is aimed at incident handling guidance for computer security incidents?

What is Dora primarily concerned with across supply chains?

What is the relationship between Annex A and ISO 27,001:2022 27,002?

What is the first step in a risk assessment for information assets per ISO 27001 guidance?

In a data/model risk assessment, which stakeholder question is most critical to align the model with business aims?

How should risks be prioritized during the assessment?

Which aspect of data is essential to gather before risk treatment for an insurance model?

What is the purpose of the risk register in an ISMS?

Which contracting practice helps manage third-party risk in insurance data projects?

How often should risk assessments be performed under ISO 27k01 guidance?

What should a risk treatment plan explicitly specify besides mitigations?

Which regulatory/data privacy considerations are crucial in an insurance data/model risk review?

What’s a best practice for communicating risk findings to executives and the board?