1. Organizations must provide, store, and retain accurate and complete information.

a. Fraud.
b. Contractual noncompliance.
c. Inaccurate or incomplete data. *
d. Regulatory actions.
2. Encompasses oversight of financial issues, internal control assessment, risk management, and
ethics
a. Finance Committee.
b. Audit Committee. *
c. Governance Committee.
d. Risk Management Committee.
3. The Chief Legal Counsel (CLC):
a. may be an employee, an officer of the organization, or an external legal adviser. *
b. concerned with managing risk at all levels of the organization. Because IT risks form a part of
this function.
c. has overall responsibility for the use of IT within the organization.
d. has overall strategic and operational control of the organization and must consider IT in most
aspects of the role.
4. All are Executive Management’s responsibilities except:
a. Provides leadership.
b. Advances the goal of security oversight and promote continuous improvement and success
c. Ensures IS efforts are supported and understood across the organization.
d. Define corporate security culture. *
5. The internal auditor will need to analyze the data and determine whether the governance
process creates and supports accountability.
a. Design Effectiveness.
b. Information Security Program Effectiveness.
c. Efficiency.
d. Accountability. *