QUESTION: 337

Which of the following is the BEST reason to initiate a reassessment of current risk?

Follow-up to an audit report
A recent security incident
Certification requirements
Changes to security personnel

Answer(s): B

QUESTION: 338

Before final acceptance of residual risk, what is the BEST way for an information security manager to address risk factors determined to be lower than acceptable risk levels?

Evaluate whether an excessive level of control is being applied.
Ask senior management to increase the acceptable risk levels.
Implement more stringent countermeasures.
Ask senior management to lower the acceptable risk levels.

Answer(s): A

Show Answer Next Question

QUESTION: 339

When selecting risk response options to manage risk, an information security manager’s MAIN focus should be on reducing:

exposure to meet risk tolerance levels.
the likelihood of threat.
financial loss by transferring risk.
the number of security vulnerabilities.

Answer(s): A

Show Answer Next Question

QUESTION: 340

Which of the following should an information security manager perform FIRST when an organization’s residual risk has increased?

Implement security measures to reduce the risk.
Communicate the information to senior management.
Transfer the risk to third parties.
Assess the business impact.

Answer(s): D

Show Answer Next Question

Free ISACA CISM Exam Braindumps (page: 112)

QUESTION: 337

QUESTION: 338

QUESTION: 339

QUESTION: 340

CISM Exam Discussions & Posts