While Preparing for an Audit of Information Security Controls in the Environment

question 119

Multiple Choice

While preparing for an audit of information security controls in the environment, an analyst outlines a framework control that has the following requirements: All sensitive data must be classified. All sensitive data must be purged on a quarterly basis. Certificates of disposal must remain on file for at least three years. This framework control is MOST likely classified as:

• A) prescriptive
• B) risk-based
• C) preventive
• D) corrective

Explain the principles behind the allocation of responses according to reinforcement schedules.

Evaluate the implications of punishment theories, including Thorndike's negative law of effect.

Recognize the role of the parietal cortex in decision-making processes as explained by matching law.

Discuss the application and limitations of the matching law in predicting human behavior.

---

Definitions:

Deontology

An ethical theory that suggests the morality of an action depends on its adherence to a set of rules, rather than its consequences.

Moral Duties

Ethical obligations or responsibilities that individuals are expected to adhere to based on moral or ethical principles.

Designated Driver

A person who abstains from alcohol on a social occasion in order to drive companions home safely.

Sober

The state of not being under the influence of alcohol or drugs, or exhibiting serious and thoughtful behavior.