FirstTry

Objective 1.5

CC

Understand governance processes.

Objective 1.5 sits in Security Principles, which carries 26% of the Certified in Cybersecurity exam. The questions below are original, written from the official objective title above, and each explanation cites the ISC2 page it rests on.

Objective title verbatim from the official objectives. ISC2 exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

1-5Security Principles

The Gramm-Leach-Bliley Act and the Safeguards Rule issued under it illustrate which governance relationship?

A law implemented by a regulationCorrect · your answerCorrect. The Rule is agency regulation giving effect to the statute.
A standard replacing a policyStandards set technical benchmarks; neither document replaces a company policy.
A policy enforcing a procedurePolicies are internal instruments and cannot enforce anything on other entities.
A guideline overriding a lawGuidelines are advisory by definition and sit below laws, never above them.

Correct.

Checked against ftc.gov, August 2026

Concept

Legislatures pass laws; agencies then issue regulations that put a law's requirements into enforceable operational detail. The two sit in a hierarchy, not side by side.

Why A

GLBA is an act of Congress, and the FTC's Safeguards Rule is the regulation implementing its data protection mandate for covered institutions.

Source

The Safeguards Rule applies to financial institutions subject to the FTC’s jurisdiction and that aren’t subject to the enforcement authority of another regulator under section 505 of the Gramm-Leach-Bliley Act, 15 U.S.C. § 6805.

FTC, Safeguards Rule compliance guide, checked August 2026
#governance#law#regulation

Now you: objective 1.5 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

1-5Security Principles

A tax preparation firm's leadership team learns the Safeguards Rule covers its activities. What kind of obligation is that?

Sample question 2 of 3

1-5Security Principles

A 30 person insurance agency is writing its first information security program, and its board points to a national bank's program as the model to copy. What does the Rule require instead?

Sample question 3 of 3

1-5Security Principles

What form must an information security program take under the Safeguards Rule?

Full Certified in Cybersecurity question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Security Principles