CyberSecurity: The Business of Cybersecurity Capstone - Security Programs - Quiz

 

1. Performance measurements are seldom required in today’s regulated InfoSec environment.

True
False

2. One of the critical tasks in the measurement process is to assess and quantify what will be measured and how it is measured.

True
False

3. A performance measure is an an assessment of the performance of some action or process against which future performance is assessed.
True
False

4. When an incident takes place, the disaster recovery (DR) plan is invoked before the incident response (IR) plan.

True
False


5. Disaster classification is the process of examining an adverse event or incident and determining whether it constitutes an actual disaster.

True
False



1. Most compliance and oversight programs required for businesses are built on a series of measurements.
2. Quantification is an essential part, because if you cannot count or assess a numeric value for a task or process, it cannot be reliably assessed in its performance over time.
3. A baseline is the value of a performance measure which is used to assess the performance of some action or process against a past value.
4. The incident plan response starts immediately. Only when the disaster is severe or the IR plan is not working is the DR plan invoked.
5. Assessing an adverse event is essential in the process of escalation of events into actionable triggers.