EC-Council Certified CISO (CCISO): 712-50

What role should the CISO play in properly scoping a PCI environment?

A. Complete the self-assessment questionnaire and work with an Approved Scanning Vendor (ASV) to determine scope

B. Work with a Qualified Security Assessor (QSA) to determine the scope of the PCI environment

C. Validate the business units' suggestions as to what should be included in the scoping process

D. Ensure internal scope validation is completed and that an assessment has been done to discover all credit card data

Your incident response plan should include which of the following?

A. Procedures for classification

B. Procedures for charge-back

C. Procedures for reclamation

D. Procedures for litigation

Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda.

Which of the following is the reason the CISO has not been able to advance the security agenda in this organization?

A. Lack of business continuity process

B. Lack of identification of technology stake holders

C. Lack of a security awareness program

D. Lack of influence with leaders outside IT