ECCouncil Updated 712-50 Exam Questions and Answers by iosif

Comprehensive and Detailed Explanation:

CCISO project governance guidance defines scope creep as the uncontrolled or unapproved expansion of project deliverables, requirements, or objectives. Scope creep increases risk, cost, and project failure likelihood if not actively managed.

Collaborative Development of Anti-Phishing Campaigns:

Business Unit Leaders: Understand operational needs and provide input on specific risks.

CISO: Designs the campaign and ensures alignment with security policies.

CIO: Ensures IT systems and training are available for campaign execution.

CEO: Champions the campaign, ensuring organizational buy-in.

Why Not Other Options:

A & D: CFO’s role is unrelated to phishing awareness campaigns.

C: All employees participate but do not develop the campaign.

Comprehensive and Detailed Explanation:

CCISO risk management principles state that controls must be cost-effective. Spending more to protect an asset than the asset’s value violates basic risk management economics.

Therefore, control cost should be less than the value of the asset, making option C correct.

Comprehensive and Detailed Explanation:

The CCISO Body of Knowledge defines the primary goal of risk management as achieving an economic balance between risk exposure and the cost of controls. CCISO materials emphasize that not all risks should be eliminated—only managed within acceptable tolerance.

Therefore, option B is correct.