Question 1

IT security people should maintain a negative view of users.

Accepted Answer

A) True 
 B)False

Question 2

It is a good idea to view the security function as a police force or military organization.

Accepted Answer

A) True 
 B)False

Question 3

Policies drive ________.

Accepted Answer

A)   implementation
B)   oversight
C)   Both A and B
D)   Neither A nor BE) C) and D)
F) All of the above

Question 4

Companies create codes of ethics in order to make ethical decision making more predictable.

Accepted Answer

A) True 
 B)False

Exam 2: Planning and Policy

Policies drive ________.