Isaca- CISM

Question ID 16806	Who should be responsible for enforcing access rights to application data?
Option A	Data owners
Option B	Business process owners
Option C	The security steering committee
Option D	Security administrators
Correct Answer	D

Description Explanation: As custodians, security administrators are responsible for enforcing access rights to data. Data owners are responsible for approving these access rights. Business process owners are sometimes the data owners as well, and would not be responsible for enforcement. The security steering committee would not be responsible for enforcement.
Update Date and Time 2017-12-29 04:29:26

 

Question ID 16807	The MOST important component of a privacy policy is:
Option A	notifications.
Option B	warranties.
Option C	liabilities.
Option D	geographic coverage.
Correct Answer	A

Description Explanation: Privacy policies must contain notifications and opt-out provisions: they are a high-level management statement of direction. They do not necessarily address warranties, liabilities or geographic coverage, which are more specific.
Update Date and Time 2017-12-29 04:30:17