IT Service Management Foundation based on ISO/IEC 20000: ITSM20F

What has to be included in a well defined process?

A. Expected outcomes

B. Functions

C. Statistical support

D. Timelines

When can the building and testing of a Change begin?

A. As soon as the impact analysis has been discussed by the members of the Change Advisory Board

B. As soon as there is a correct network plan for the change

C. As soon as the Request for Change (RFC) has been formally authorized

D. As soon as the Request for Change (RFC) has been classified

Which of the following is a best practice concerning information security risk assessment?

A. Information security risk assessments should be carried out by an external auditor to maintain objectivity.

B. Information security risk assessments should be performed as a result of the review of every incident.

C. Information security risk assessments should be performed at agreed intervals and be maintained during changes.

D. Information security risk assessments should be performed once a year.