Free CISM Exam Braindumps
Certified Information Security Manager Questions 536–540 (page: 109)

Updated On: 10-Feb-2026

Which metric is the BEST indicator that an update to an organization’s information security awareness strategy is effective?

  1. A decrease in the number of incidents reported by staff
  2. A decrease in the number of email viruses detected
  3. An increase in the number of email viruses detected
  4. An increase in the number of incidents reported by staff

Answer(s): A



An organization involved in e-commerce activities operating from its home country opened a new office in another country with stringent security laws. In this scenario, the overall security strategy should be based on:

  1. risk assessment results.
  2. international security standards.
  3. the most stringent requirements.
  4. the security organization structure.

Answer(s): D



Which of the following is the PRIMARY reason to conduct periodic business impact assessments?

  1. Improve the results of last business impact assessment
  2. Update recovery objectives based on new risks
  3. Decrease the recovery times
  4. Meet the needs of the business continuity policy

Answer(s): B



Which of the following is the BEST approach to make strategic information security decisions?

  1. Establish an information security steering committee.
  2. Establish periodic senior management meetings.
  3. Establish regular information security status reporting.
  4. Establish business unit security working groups.

Answer(s): D



Which if the following would be the MOST important information to include in a business case for an information security project in a highly regulated industry?

  1. Compliance risk assessment
  2. Critical audit findings
  3. Industry comparison analysis
  4. Number of reported security incidents

Answer(s): A



Viewing page 109 of 345
Viewing questions 541 - 545 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!