Information Security Policy [2] Organization of Information Security [3] Human Resources Security[4] Asset Management [5] Logical Security / Access control [6] Physical and Environmental Security [7] Operations Security [8] Communications Security [9] Systems Acquisition, Development, and Maintenance [10] Supplier Relationships [11] Information Security Incident Management [12] Information Security Aspects of Business Continuity Management [13] Compliance2. Create a table and list all controls for each domain in Figure 1. Refer pdf document attaches.

Which domain involves defining security goals and objectives, risk mitigation, compliance, business continuity, and the law?1 pointSecurity and risk managementSecurity architecture and engineeringIdentity and access managementSecurity assessment and testing

You have recently been hired as a cybersecurity analyst for a large corporation. Your manager asks you to define what a security policy is. How would you best describe a security policy?1.0 MarksA list of approved software applications and tools for employees to useA set of physical security measures implemented to protect the company's premisesA comprehensive plan for safeguarding the organization's information and technology assetsA document outlining the procedures for handling cybersecurity incidents

The following is correct about information security policies and procedures for any organization/insititution a. Helps protects individuals from being victims of security incidents b. provide the steps to follow incase of a security breach c. helps one to understand the levels of responsibility involved d. All of the above

Which of the following tasks are part of the security and risk management domain? Select all that apply.1 pointDefining security goals and objectivesComplianceBusiness continuitySecuring physical assets

Question 5A security professional is researching compliance and the law in order to define security goals. Which domain does this scenario describe?1 pointSecurity and risk management Security assessment and testingIdentity and access managementSecurity architecture and engineering