CPA Isc Quiz
20 questions · no time limit
0:00
Finish quiz
INFORMATION SYSTEMS
Question 1
of 20
Flag for review
No time limit
Current
Answered
Flagged
Not seen
Which of the following is the primary purpose of an IT security policy exception process?
A
To allow employees to permanently ignore security requirements they find inconvenient.
B
To provide a formal, time-limited, risk-accepted mechanism for situations where full policy compliance is not immediately feasible, with compensating controls and management approval.
C
To document that the organization is aware of its non-compliance for external auditors.
D
To transfer responsibility for security risks to the employee requesting the exception.
YOUR PROGRESS
20
QUESTIONS
Ready when you are
Answer in any order. Your progress shows here as you go.
QUESTIONS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
KEYBOARD
Pick an answer
A
B
C
D
Next question
↵
→
Previous
←
Flag for review
F