Kuzman Jovan called a meeting of the top management at Jovan Capital Management.Number one on the agenda was computer system security."The risk of security breach incidents has become unacceptable," he said,and turned to the Chief Information Officer."What do you intend to do?" Which of the following is the best answer?
A)Evaluate and modify the system using COBOL.
B)Evaluate and modify the system using the CTC checklist.
C)Evaluate and modify the system using the Trust Services framework
D)Evaluate and modify the system using the COSO Internal Control Framework.

Question

Quizplus · Accepted Answer

The Trust Services framework focuses on information system security, availability, processing integrity, confidentiality, and privacy. It provides a comprehensive approach to evaluate and improve the security and reliability of computer systems. Therefore, option C is the best choice for evaluating and modifying the computer system security in Jovan Capital Management. Option A is not relevant, as COBOL is a programming language and does not provide a framework for computer system security. Option B refers to the Cybersecurity Framework (CSF) as defined by the National Institute of Standards and Technology (NIST), which is more applicable to cybersecurity risks in critical infrastructure sectors. Option D refers to the COSO Internal Control Framework, which is broader in scope and addresses internal control over financial reporting, operational, and compliance risks, rather than information security risks.

Kuzman Jovan Called a Meeting of the Top Management at Jovan