Obtain a copy of COBIT (available at www.isaca.org) and read section DS5.

Design a checklist for assessing each of the 11 detailed information security control objectives. The checklist should contain questions to which a Yes response represents a control strength, a No response represents a control weakness, plus a possible N/A response.

Provide a brief reason for asking each question. Organize your checklist as follows:

Transcribed Image Text:

Question Yes No N/A Reason for asking 1. Is there regular security awareness training? Training is one of the most important preventive controls because many security incidents happen due to either human error or social ngineering