Cybersecurity Governance CCOA Practice Questions (Page 7)

Questions 31–33

1. 31expert · hard

   A company has a security incident that resulted in a data breach. The board wants to know who is accountable. The CISO says the security analyst who failed to act on an alert is responsible. The analyst says they were not trained on the new alert system. The manager says the analyst should have escalated. Who is ultimately accountable to the board?

   • AThe security analyst, because they failed to act on the alert.
   • BThe CISO, because they are responsible for the overall security program and ensuring that staff are trained and processes are effective.
   • CThe board, because they approved the budget for the security program.
   • DThe manager, because they should have supervised the analyst more closely.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Why are clear reporting lines important in cybersecurity governance?

   • AThey allow security analysts to bypass management and directly contact external regulators.
   • BThey ensure that all security decisions are made by the board of directors.
   • CThey eliminate the need for security incident documentation.
   • DThey ensure that security issues are escalated to the appropriate level of authority for decision-making and action.
   Reveal Solution Discussion Select an answer first
3. 33application · medium

   A company is preparing for a SOC 2 audit. The audit will assess the company's controls related to security, availability, and confidentiality. What is the primary role of the auditor in this process?

   • ATo help the company implement new security controls before the audit.
   • BTo independently evaluate whether the company's controls are designed and operating effectively to meet the SOC 2 trust criteria.
   • CTo guarantee that the company is secure and free from all risks.
   • DTo issue a certificate that the company is compliant with all laws and regulations.
   Reveal Solution Discussion Select an answer first