Free CISM Exam Braindumps
Certified Information Security Manager Questions 526–530 (page: 107)

Updated On: 10-Feb-2026

Of the following, whose input is of GREATEST importance in the development of an information security strategy?

  1. End users
  2. Corporate auditors
  3. Process owners
  4. Security architects

Answer(s): D



Which of the following BEST enables an information security manager to determine the comprehensiveness of an organization’s information security strategy?

  1. Business impact analysis
  2. Organizational risk appetite
  3. Independent security audit
  4. Security risk assessment

Answer(s): A



An information security manager is developing a business case for an investment in an information security control. The FIRST step should be to:

  1. research vendor pricing to show cost efficiency
  2. assess potential impact to the organization
  3. demonstrate increased productivity of security staff
  4. gain audit buy-in for the security control

Answer(s): B



Which of the following techniques would be the BEST test of security effectiveness?

  1. Performing an external penetration test
  2. Reviewing security policies and standards
  3. Reviewing security logs
  4. Analyzing technical security practices

Answer(s): B



In the event that a password policy cannot be implemented for a legacy application, which of the following is the BEST course of action?

  1. Update the application security policy.
  2. Implement compensating control.
  3. Submit a waiver for the legacy application.
  4. Perform an application security assessment.

Answer(s): B



Viewing page 107 of 345
Viewing questions 531 - 535 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!