View source for Security Best Practices and Addressing Regulatory Mandates Testing Template:

'''Security Best Practices and Addressing Regulatory Mandates Awareness Testing Template'''<br>
<br>
This exam has been developed by <Your Company Name> to gauge and promote end-user awareness of regulatory compliance solutions through the establishment of effective policy and standards.<br>
<br>
'''True or False: Security can be communicated, taught, or measured effectively without policy.'''<br>
True<br>
False<br>
<br>
'''Policy:'''<br>
Provides a framework for consistent, timely, and cost-effective management decisions.<br>
Provides justification for controls/products to be implemented.<br>
Supports compliance with legal requirements to protect data.<br>
All of the above.<br>
<br>
'''True or False: Two-thirds of all federal agencies receive a superior grade for efforts to secure information systems.'''<br>
True<br>
False<br>
<br>
'''True or False: There are many myths and challenges associated with policy.'''<br>
True<br>
False<br>
<br>
'''The Policy Framework breaks policy into a hierarchical structure which is traceable to business needs and is based on:'''<br>
Management best guesses.<br>
Risk Management.<br>
Past legislation.<br>
None of the above.<br>
<br>
'''Organizations need policy management tools and resources to develop and manage:<br>
Company business and interests.'''<br>
Union and non-union employees.<br>
Critical information security processes.<br>
None of the above.<br>
<br>
'''Critical information security processes include:'''<br>
Policy Management.<br>
Awareness & Training Management<br>
Security Threat Monitoring & Incident Management.<br>
All of the above.<br>
<br>
'''True or False: Key stakeholders should have significant involvement in the process of creating new policy and contributing implementation ideas.'''<br>
True<br>
False<br>
<br>
'''True or False: Sound policy development will include the identification and classification of information assets and the identification of threats and vulnerabilities.'''<br>
True<br>
False<br>
<br>
'''True or False: If no one thinks you are enforcing policy... no one will care!'''<br>
True<br> 
False<br>
<br>