Cybersecurity Plus Bootcamp Module 15 Quiz

Which metrics can be used to quantitatively calculate risk from a specific threat to a specific asset?

Purchasing insurance to cover potential losses from a cyber incident is an example of which risk management strategy?

What is a risk register?

Which contractual provision grants an organization the authority to audit a vendor’s operations and security controls?

True or False: A conflict of interest in vendor management occurs when competing obligations or interests could affect objectivity.

Which type of agreement outlines nonbinding shared goals between two parties before creating a formal contract?

Which document sets clear guidelines for vendor activities, communication, and access to sensitive information?

A penetration test is designed to simulate a criminal group with no insider knowledge of a target website. What type of engagement is this?

What is a self-assessment?

True or False: Third-party assessments are valuable because they provide unbiased, external evaluations.