Framework, Regulation, or Standard? Quiz

Froggy Jumps

Jugadas 0

Crear copia

Sobre esta actividad

Identify governance terms and examples

Creada por

ciera

Estados Unidos

Descarga la versión para jugar en papel

Top 10 resultados

Todavía no hay resultados para este juego. ¡Sé el primero en aparecer en el ranking! Inicia sesión para identificarte.

Crea tu propio juego gratis desde nuestro creador de juegos

Compite contra tus amigos para ver quien consigue la mejor puntuación en esta actividad

Crear reto

		%
	Anónimo	%
		%
		%

Imprime tu juego

Framework, Regulation, or Standard? Quiz


Froggy Jumps Framework, Regulation, or Standard? QuizVersión en línea Identify governance terms and examples por ciera 1 What is a standard in information security, as described in ISO/IEC 27001 context? a A defined set of controls and requirements to achieve a security objective b A mandatory legal rule issued by a government c A company-specific policy with no formal endorsement 2 Which term best fits a globally agreed set of practices that organizations can implement to manage risk? a Regulation b Framework c Standard 3 DORA is an example of what, in the transcript? a Framework b Regulation c Standard 4 ISO 27,001 is described as what kind of mechanism for information security? a A framework for a management system (ISMS) b A single product certification c A legal binding regulation 5 What does ISO 27,002 provide in relation to 27,001? a Guidance for implementing and managing information security controls b Official certification service c Financial audit standards 6 Which standard is described as a baseline for protecting cardholder data in payments? a PCI DSS b ISO 27001 c NIST CSF 7 SOC 2 focuses on which set of criteria? a Financial reporting only b Physical safety and environmental controls c Security, Availability, Processing Integrity, Confidentiality, and Privacy 8 Which document is aimed at incident handling guidance for computer security incidents? a PCI DSS 4.0 b ISO 22301 c SP 800-61 (Computer Security Incident Handling Guide) 9 What is Dora primarily concerned with across supply chains? a Holistic cyber risk management and incident reporting b Blocking all third-party access c Only internal IT systems 10 What is the relationship between Annex A and ISO 27,001:2022 27,002? a Annex A is the certification body; 27,002 is the audit standard b Annex A is optional; 27,002 replaces it c Annex A lists objectives; 27,002 provides implementation guidance 11 What is the first step in a risk assessment for information assets per ISO 27001 guidance? a Interview only senior management. b Identify information assets and owners. c Define risk appetite before assets. 12 In a data/model risk assessment, which stakeholder question is most critical to align the model with business aims? a What is the IT budget for the year? b What business objectives rely on this data/model? c Which employees access this data daily? 13 How should risks be prioritized during the assessment? a Alphabetically by data source name. b Based on likelihood and potential impact. c By the size of the data set only. 14 Which aspect of data is essential to gather before risk treatment for an insurance model? a The marketing department’s goals. b The model’s color scheme. c Data lineage and data quality. 15 What is the purpose of the risk register in an ISMS? a A list of all vendors only. b Central inventory to track risks and treatment plans. c A log of user passwords. 16 Which contracting practice helps manage third-party risk in insurance data projects? a Only require annual invoices. b Include data security, privacy, and audit rights in contracts. c Exclude security clauses to speed procurement. 17 How often should risk assessments be performed under ISO 27k01 guidance? a Only once at project start. b Every five years. c Annually or after major changes. 18 What should a risk treatment plan explicitly specify besides mitigations? a The company holiday schedule. b Risk ownership and acceptance criteria. c The internal email protocol. 19 Which regulatory/data privacy considerations are crucial in an insurance data/model risk review? a Compliance with applicable laws and data privacy requirements. b Ignoring regional rules to speed up models. c Relying only on internal policies. 20 What’s a best practice for communicating risk findings to executives and the board? a Present only qualitative anecdotes. b Use dashboards with risk status, trends, and actions. c Show raw asset inventories with no context.

Puedes integrar el juego en un LMS compatible con LTI 1.1 o LTI 1.3 como Canvas, Moodle, o Blackboard. De esta manera podrás guardar las puntuaciones automáticamente en el libro de calificaciones de esa plataforma.

Framework, Regulation, or Standard? Quiz

Froggy Jumps

Sobre esta actividad

Creada por

Descarga la versión para jugar en papel

Top juegos

Froggy Jumps

El valle de los lobos

Froggy Jumps

Quiz de Culpa mía película

Froggy Jumps

Salva a la Ranita

Froggy Jumps

Sabiduría animal

Froggy Jumps

OPEN UP 6 UNIT 1 VOCABULARY

Froggy Jumps

Framework, Regulation, or Standard? QuizVersión en línea

por ciera

What is a standard in information security, as described in ISO/IEC 27001 context?

Which term best fits a globally agreed set of practices that organizations can implement to manage risk?

DORA is an example of what, in the transcript?

ISO 27,001 is described as what kind of mechanism for information security?

What does ISO 27,002 provide in relation to 27,001?

Which standard is described as a baseline for protecting cardholder data in payments?

SOC 2 focuses on which set of criteria?

Which document is aimed at incident handling guidance for computer security incidents?

What is Dora primarily concerned with across supply chains?

What is the relationship between Annex A and ISO 27,001:2022 27,002?

What is the first step in a risk assessment for information assets per ISO 27001 guidance?

In a data/model risk assessment, which stakeholder question is most critical to align the model with business aims?

How should risks be prioritized during the assessment?

Which aspect of data is essential to gather before risk treatment for an insurance model?

What is the purpose of the risk register in an ISMS?

Which contracting practice helps manage third-party risk in insurance data projects?

How often should risk assessments be performed under ISO 27k01 guidance?

What should a risk treatment plan explicitly specify besides mitigations?

Which regulatory/data privacy considerations are crucial in an insurance data/model risk review?

What’s a best practice for communicating risk findings to executives and the board?