Framework, Regulation, or Standard? Quiz

Froggy Jumps

Played 0

Create copy

About this activity

Identify governance terms and examples

Created by

ciera

United States

Download the paper version to play

Top 10 results

There are still no results for this game. Be the first to stay in the ranking! Log in to identify yourself.

Make your own free game from our game creator

Compete against your friends to see who gets the best score in this game

Make challenge

The Integumentary System

Breanna Nesbitt

United States

(58)

Functions and Structures of the skin
Ethos, Pathos, and Logos Quiz

Kristine Vester

United States

(131)

Test your knowledge of ethos, pathos, and logos with these 10 questions on examples of persuasive techniques.
Phlebotomy Order of Draw Quiz

Pamela Chapman

United States

(59)

Test your knowledge of the order of draw in Phlebotomy with these 10 questions!
pizza

Lorelay Tyana

Romania

(259)

joc despre pizza
Bill of Rights Game - The Constitutionalist

Doni The Don

United States

(89)

Test your knowledge on the Bill of Rights. A fun way to test your knowledge and focus on where you need to improve.

		%
	Anonymous	%
		%
		%

Print your game

Framework, Regulation, or Standard? Quiz


Froggy Jumps Framework, Regulation, or Standard? QuizOnline version Identify governance terms and examples by ciera 1 What is a standard in information security, as described in ISO/IEC 27001 context? a A defined set of controls and requirements to achieve a security objective b A mandatory legal rule issued by a government c A company-specific policy with no formal endorsement 2 Which term best fits a globally agreed set of practices that organizations can implement to manage risk? a Regulation b Framework c Standard 3 DORA is an example of what, in the transcript? a Framework b Regulation c Standard 4 ISO 27,001 is described as what kind of mechanism for information security? a A framework for a management system (ISMS) b A single product certification c A legal binding regulation 5 What does ISO 27,002 provide in relation to 27,001? a Guidance for implementing and managing information security controls b Official certification service c Financial audit standards 6 Which standard is described as a baseline for protecting cardholder data in payments? a PCI DSS b ISO 27001 c NIST CSF 7 SOC 2 focuses on which set of criteria? a Financial reporting only b Physical safety and environmental controls c Security, Availability, Processing Integrity, Confidentiality, and Privacy 8 Which document is aimed at incident handling guidance for computer security incidents? a PCI DSS 4.0 b ISO 22301 c SP 800-61 (Computer Security Incident Handling Guide) 9 What is Dora primarily concerned with across supply chains? a Holistic cyber risk management and incident reporting b Blocking all third-party access c Only internal IT systems 10 What is the relationship between Annex A and ISO 27,001:2022 27,002? a Annex A is the certification body; 27,002 is the audit standard b Annex A is optional; 27,002 replaces it c Annex A lists objectives; 27,002 provides implementation guidance 11 What is the first step in a risk assessment for information assets per ISO 27001 guidance? a Interview only senior management. b Identify information assets and owners. c Define risk appetite before assets. 12 In a data/model risk assessment, which stakeholder question is most critical to align the model with business aims? a What is the IT budget for the year? b What business objectives rely on this data/model? c Which employees access this data daily? 13 How should risks be prioritized during the assessment? a Alphabetically by data source name. b Based on likelihood and potential impact. c By the size of the data set only. 14 Which aspect of data is essential to gather before risk treatment for an insurance model? a The marketing department’s goals. b The model’s color scheme. c Data lineage and data quality. 15 What is the purpose of the risk register in an ISMS? a A list of all vendors only. b Central inventory to track risks and treatment plans. c A log of user passwords. 16 Which contracting practice helps manage third-party risk in insurance data projects? a Only require annual invoices. b Include data security, privacy, and audit rights in contracts. c Exclude security clauses to speed procurement. 17 How often should risk assessments be performed under ISO 27k01 guidance? a Only once at project start. b Every five years. c Annually or after major changes. 18 What should a risk treatment plan explicitly specify besides mitigations? a The company holiday schedule. b Risk ownership and acceptance criteria. c The internal email protocol. 19 Which regulatory/data privacy considerations are crucial in an insurance data/model risk review? a Compliance with applicable laws and data privacy requirements. b Ignoring regional rules to speed up models. c Relying only on internal policies. 20 What’s a best practice for communicating risk findings to executives and the board? a Present only qualitative anecdotes. b Use dashboards with risk status, trends, and actions. c Show raw asset inventories with no context.

You can integrate the game into an LMS compatible with LTI 1.1 or LTI 1.3 such as Canvas, Moodle, or Blackboard. This way, the scores will be automatically saved into the platform’s gradebook.

Framework, Regulation, or Standard? Quiz

Froggy Jumps

About this activity

Created by

Download the paper version to play

Top Games

Froggy Jumps

The Integumentary System

Froggy Jumps

Ethos, Pathos, and Logos Quiz

Froggy Jumps

Phlebotomy Order of Draw Quiz

Froggy Jumps

pizza

Froggy Jumps

Bill of Rights Game - The Constitutionalist

Froggy Jumps

Framework, Regulation, or Standard? QuizOnline version

by ciera

What is a standard in information security, as described in ISO/IEC 27001 context?

Which term best fits a globally agreed set of practices that organizations can implement to manage risk?

DORA is an example of what, in the transcript?

ISO 27,001 is described as what kind of mechanism for information security?

What does ISO 27,002 provide in relation to 27,001?

Which standard is described as a baseline for protecting cardholder data in payments?

SOC 2 focuses on which set of criteria?

Which document is aimed at incident handling guidance for computer security incidents?

What is Dora primarily concerned with across supply chains?

What is the relationship between Annex A and ISO 27,001:2022 27,002?

What is the first step in a risk assessment for information assets per ISO 27001 guidance?

In a data/model risk assessment, which stakeholder question is most critical to align the model with business aims?

How should risks be prioritized during the assessment?

Which aspect of data is essential to gather before risk treatment for an insurance model?

What is the purpose of the risk register in an ISMS?

Which contracting practice helps manage third-party risk in insurance data projects?

How often should risk assessments be performed under ISO 27k01 guidance?

What should a risk treatment plan explicitly specify besides mitigations?

Which regulatory/data privacy considerations are crucial in an insurance data/model risk review?

What’s a best practice for communicating risk findings to executives and the board?