Section: Protection of Information Assets
Explanation:
Financial results have traditionally been the sole overall performance metric. The IT balanced scorecard (BSC) is an IT business governance tool aimed at monitoring IT performance evaluation indicators other than financial results. The IT BSC considers other key success factors, such as customer satisfaction, innovation capacity and processing.

An IS auditor should not recommend discontinuing or completing the project before reviewing an updated business case. The IS auditor should recommend that the business case be kept current
throughout the project since it is a key input to decisions made throughout the life of any project.

Section: Protection of Information Assets
Explanation
Explanation:
The first action is to disconnect the web server from the network to contain the damage and prevent more
actions by the attacker. Dumping the volatile storage data to a disk may be used at the investigation stage
but does not contain an attack in progress. To run the server in a fail-safe mode, the server needs to be
shut down. Shutting down the server could potentially erase information that might be needed for a forensic
investigation or to develop a strategy to prevent future similar attacks.

Section: Protection of Information Assets

Explanation/Reference:
Explanation:
The board of directors and executive officers are ultimately accountable for the functionality, reliability, and security within IT governance.