CompTIA Security+ Practice Tests, 2nd Edition

Chapter 5Governance, Risk, and Compliance

THE COMPTIA SECURITY+ EXAM SY0-601 TOPICS COVERED IN THIS CHAPTER INCLUDE THE FOLLOWING:

• 5.1 Compare and contrast various types of controls
• 5.2 Explain the importance of applicable regulations, standards, or frameworks that impact organizational security posture
• 5.3 Explain the importance of policies to organizational security
• 5.4 Summarize risk management processes and concepts
• 5.5 Explain privacy and sensitive data concepts in relation to security

1. Caroline has been asked to find an international standard to guide her company's choices in implementing information security management systems. Which of the following would be the best choice for her?
   1. ISO 27002
   2. ISO 27017
   3. NIST 800-12
   4. NIST ...