Which of the following should be of MOST concern to an information security manager reviewing an organization’s data classification program?
Answer(s): B
Which of the following would the BEST demonstrate the added value of an information security program?
An information security manager is asked to provide evidence that the organization is fulfilling its legal obligation to protect personally identifiable information (PII).Which of the following would be MOST helpful for this purpose?
Answer(s): A
Which of the following should be PRIMARILY included in a security training program for business process owners?
A CIO has asked the organization’s information security manager to provide both one-year and five-year plansfor the information security program. What is the PRIMARY purpose for the long-term plan?
Answer(s): D
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.