A.  

Establishing security policies and standards, testing Business Continuity Plans

B.  

Establishing business context for security, detecting and responding to attacks

C.  

Developing Plans of Action & Milestones, managing Crisis Events

D.  

Identifying and meeting regulatory obligations, defining and implementing policies and standards

A.  

The organization's priorities help drive meaningful action based on the criticality and value to the organization

B.  

The organization's priorities should not be folded into the product so they can better evaluate Market drivers

C.  

Audit Management should not be configured at all - it must be used exactly as installed

D.  

The organization's priorities are determined by the Audit Staff, resulting in an effective bottom-up approach to audit

A.  

Everyone

B.  

Global Report Creator

C.  

Solution Administrator

D.  

There is no default selection for global reports

A.  

Authoritative Sources

B.  

Findings

C.  

Question Library

D.  

Manage Questionnaires

A.  

Date fields cannot by dynamically populated

B.  

Make the date field a calculated field

C.  

Use a Data-Driven Event to populate the date field

D.  

Pre-set the date field with the desired date in Manage Applications

A.  

An interface that allows the user to create and assign new tasks for other users

B.  

The top x-number of open Tasks, sorted by date. The administrator defines the maximum number of records that can appear

C.  

All Task Management records that have been recently edited, regardless of status

D.  

Up to 25 open Task Management records appear at the top; Archived (Closed) Task Management records appear in a collapsed section at the bottom

A.  

Improved leveraging of assessment results

B.  

Decentralized issues management process

C.  

Consolidated and coordinated list of findings and remediation plans

D.  

Increased reactive overload for business operations

A.  

All fields in the records are included in all Notifications.

B.  

Only fields that have the Search results checkbox selected can be included in the notification email.

C.  

The fields specified in the Notification Template will appear, assuming the recipient has access to all included fields.

D.  

The end user has complete editing rights over the fields that will appear, so it is up to each user to define the included content.

A.  

XML

B.  

HTML

C.  

Microsoft Word

D.  

Flat, delimited-values data file

A.  

Key fields must be unique.

B.  

Any field can be configured to be a key field.

C.  

Applications can have an unlimited number of key fields.

D.  

Key fields are displayed as a hyperlink to the record within search results.