SOX
ISO
Cybersecurity Basics
General Audit
Random
100

SOX stand for...

What is Sarbanes-Oxley

100

What does ISO stand for?

What is International Organization for Standardization 

100

The fraudulent practice of sending emails to induce individuals to reveal personal information.

What is Phishing?

100

This type of audit focuses on an organization's financial statements.

What is a Financial Audit

100

This team ensure business established processes are being performed as intended while mitigating risks.

Who is Compliance?

200

ITGC is an abbreviation for...

Information Technology General Controls

200

This control objective within ISO aims to protect information assets from unauthorized access.

What is Confidentiality

200

A strong password should be at least how many characters long

What is 8 Characters 

200

This audit focuses an organization's compliance with applicable laws, regulations, etc. 

What is a compliance audit?

200

One of their function is to review the level of hardening a current or new application have before released into production.

Who is Security?

300

This financial scandal prompted the enactment of the Sarbanes-Oxley Act

What is Enron and WorldComm

300

This ISO standard specifies the basic requirements for an information security management system (ISMS)

What is ISO 27001

300

This security measure acts as a barrier between an internal network and external networks.

What is a firewall

300

The control type that is embedded in the process before an incident can take place.

What is a preventive control.

300

This common security control involves restricting access to systems and data based on a user's role.

What is Access Control
400

This party is responsible for ensuring SOX compliance within a company.

What is Managment

400

This external auditor performs our ISO audit.

Who is A-Lign?

400

This term describes the manipulation of individuals to obtain confidential or personal information.

What is social engineering

400

Audit report based on security, availability, integrity, confidentiality and privacy.

What is SOC 2

400

EU regulatory framework that focuses on protecting the privacy of consumer data

What is GDPR

500

This government entity audits the auditors

What is the PCAOB

500

This ISO standard outlines guidelines for managing risks related to information security.

What is ISO 27005

500

Cyberattack that takes advantage of an unknown or unaddressed security flaw in computer software

What is Zero Day Exploit
500

Number of Paylocity external audits in a fiscal year.

What is 4? (SOC 1, SOC 2, ISO, SOX)

500

This team assists control owners and lower potential findings by keeping external auditors within the agreed scope.

Who is Compliance?

M
e
n
u