Domain 1: Security and Risk Management - Security Frameworks - Security Controls Development

10 important questions on Domain 1: Security and Risk Management - Security Frameworks - Security Controls Development

Where does COBIT help with?

It helps organizations optimize the value of their IT by balancing resource utilization, risk levels, and realization of benefits.

How many IT-related and enterprise related goals does COBIT describes?

17 enterprise and 17 IT related goals

Everything in COBIT is linked with cascading goals, what does this mean?

IT goal that led to an enterprise goal that led to the stakeholders needs
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart

The majority of the security compliance auditing practices used today in the industry are based off......?

COBIT

Is COBIT purely security focused

No, it deals with all aspects of information technology. Security is only one aspect.

What is the NIST SP 800-53 about?

This is a publication 'Special Publication 800-53' "Security and Privacy Controls for Federal Information Systems and Organizations"

Who uses the NIST SP 800-53 and why?

Government agencies are using this documents to be compliant with the Federal Information Security Management Act of 2002 (FISMA)

What do government auditors use as a checklist and for what reason?

They are using the NIST SP 800-53 for a checklist approach to evaluating if an organization is compliant with regulations.

Which control categories are being used by the government described within the NIST SP 800-53?

Management, Technical, Operational

In which year was the COSO IC framework released and last updated?

released in 1992 and last updated in 2013

The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo