The Role of the CISO ACCISO Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A financial services firm is facing a new regulation that requires encryption of all customer data at rest and in transit. The CISO has conducted a risk assessment and identified that the current encryption standards are outdated and do not meet the new regulatory requirements. The cost to upgrade encryption across all systems is significant, and the budget is limited. The CISO must decide how to proceed. Which decision best reflects the CISO's role in risk management and compliance?

   • AAccept the risk of non-compliance and focus the budget on other security areas that the CISO considers more important.
   • BImmediately upgrade encryption for all systems, even if it means exceeding the budget and delaying other critical security projects.
   • CPrioritize upgrading encryption for systems that store the most sensitive customer data and document a plan to address the remaining systems over time.
   • DRequest an exemption from the regulation until the budget is available next year.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A multinational corporation is establishing a security governance framework to align with ISO 27001 and various regional data protection laws. The CISO is leading this effort. What is the CISO's primary role in establishing the governance framework?

   • AFocus only on technical controls and delegate policy development to the legal team.
   • BImplement the framework only after a major security incident occurs.
   • CApprove all security policies personally without input from other departments.
   • DDefine the security governance structure, including policies, standards, and processes, and ensure alignment with business objectives and regulatory requirements.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company has just experienced a ransomware incident that encrypted critical files. The incident response team is working to restore systems from backups. The CEO wants to know when operations will return to normal and what the financial impact will be. What is the CISO's primary role during this incident?

   • ANegotiating with the attackers for the decryption key
   • BConducting the post-incident review immediately
   • CRestoring the encrypted files from backup
   • DCommunicating incident status and impact to the CEO and board
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A CISO is evaluating the adoption of artificial intelligence (AI) for security monitoring. The vendor claims that the AI can reduce false positives by 80%. However, the CISO is concerned about the potential for adversarial attacks on the AI model and the lack of transparency in its decision-making. The organization has a low tolerance for security incidents. What is the most appropriate approach for the CISO?

   • AAdopt the AI immediately because the vendor's claim of 80% reduction in false positives is compelling.
   • BReject the AI entirely because of the potential for adversarial attacks.
   • CConduct a pilot program to test the AI in a controlled environment, evaluate its performance against existing monitoring, and assess the risks of adversarial manipulation.
   • DImplement the AI without a pilot but with additional monitoring to detect adversarial attacks.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is a key consideration for a CISO when communicating security initiatives to non-technical stakeholders?

   • AExplaining how the initiatives reduce risk and support business goals
   • BAvoiding any mention of costs or resource requirements
   • CUsing as much technical detail as possible to build credibility
   • DFocusing on the features of the security products being used
   Reveal Solution Discussion Select an answer first