712-50 Exam Dumps - EC-Council Certified CISO (CCISO)

The types of cardholder data retained

The duration card holder data is retained

The size of the organization processing credit card data

The number of transactions performed per year by an organization

Policies

Procedures

Guidelines

Standards

Risk = Probability x Impact

Risk = Threat x Probability

Risk = Financial Impact x Probability

Risk = Impact x Threat

Mandatory controls

Discretionary controls

Optional controls

Financial controls

A high threat environment

A low risk tolerance environment

I low vulnerability environment

A high risk tolerance environment

Work with the IT group and tell them to put IPS in-line and say it won’t cause any network impact

Explain to the IT group that the IPS won’t cause any network impact because it will fail open

Explain to the IT group that this is a business need and the IPS will fail open however, if there is a network failure the CISO will accept responsibility

Explain to the IT group that the IPS will fail open once in-line however it will be deployed in monitor mode for a set period of time to ensure that it doesn’t block any legitimate traffic

When organizational resources are limited

When the benefits of outsourcing outweigh the inherent risks of outsourcing

On new, enterprise-wide security initiatives

On projects not forecasted in the yearly budget

Create a comprehensive security awareness program and provide success metrics to business units

Create security consortiums, such as strategic security planning groups, that include business unit participation

Ensure security implementations include business unit testing and functional validation prior to production rollout

Ensure the organization has strong executive-level security representation through clear sponsorship or the creation of a CISO role