Ctprp Exam | 99 Questions And Answers With Complete Solution

phishing {Ans: targeted emails trying to get the user to click a link or download a program}cause termination {Ans: irreparable violation of contract terms}policies should be: {Ans: -defined at an enterprise level -include all relevant corporate functions}hybrid cloud {Ans: combination of public and private cloud computing environments shared between them}Network security review should include: {Ans: -network device hardening standards -approval process when connecting new devices or firewall rule changes -outbound scans for malware, malicious/blacklisted sites, data policy violations}components of a cloud vendor assessment program {Ans: - review of audit form attestation reports - security services documentation - image snapshot approval and mgmt process - patching responsibility}background and employment verification {Ans: -education -identity verification (SSN) -certification and license verification -social media sites -optional based on industry (OFAC, drug testing, credit check, finger printing)}fourth party/subcontractor {Ans: an entity independent of and directly performing tasks for the assessee being evaluated}comprehensive set of policies, standards and procedures {Ans: foundation for every effective third party risk management program}out of wallet authentication {Ans: -information about a user not readily available in financial data bases -negatively impacted by growth in social media}Executive management level metrics {Ans: