Qwissit Cybersecurity

ISC2 CC

GRC, Awareness and Metrics

12 of 60 questions in the app

Governance, risk and compliance

  1. What does the abbreviation GRC stand for? Easy
  2. What does compliance mean? Easy
  3. Who is ultimately accountable for a company's information security? Easy
  4. What is the purpose of an audit? Easy
  5. Who is the data owner? Easy

Security awareness

  1. What is social engineering? Easy
  2. What is phishing? Easy
  3. What is phishing by phone call called? Easy

Governance, risk and compliance

  1. What advantages does an integrated GRC approach bring? Medium
  2. What does a GRC platform typically do? Medium

Governance, risk and compliance

  1. A company must comply with ISO/IEC 27001, PCI DSS and NIS2. Each team maintains its own spreadsheets with partly contradictory information on the same controls. What solves the problem best? Hard
  2. An audit finds that access reviews have not taken place for a year. Which steps are appropriate? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications