Free CISM Exam Braindumps
Certified Information Security Manager Questions 576–580 (page: 117)

Updated On: 10-Feb-2026

Which of the following would provide the BEST justification for a new information security investment?

  1. Results of a comprehensive threat analysis.
  2. Projected reduction in risk.
  3. Senior management involvement in project prioritization.
  4. Defined key performance indicators (KPIs)

Answer(s): A



Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise’s security management framework?

  1. To determine the desired state of enterprise security
  2. To establish the minimum level of controls needed
  3. To satisfy auditors’ recommendations for enterprise security
  4. To ensure industry best practices for enterprise security are followed

Answer(s): A



The PRIMARY reason for establishing a data classification scheme is to identify:

  1. data ownership.
  2. data-retention strategy.
  3. appropriate controls.
  4. recovery priorities.

Answer(s): C



Which of the following needs to be established between an IT service provider and its clients to the BEST
enable adequate continuity of service in preparation for an outage?

  1. Data retention policies
  2. Server maintenance plans
  3. Recovery time objectives
  4. Reciprocal site agreement

Answer(s): C



For an organization with operations in different parts of the world, the BEST approach for ensuring that security policies do not conflict with local laws and regulations is to:

  1. refer to an external global standard to avoid any regional conflict
  2. make policies at a sufficiently high level, so they are globally applicable
  3. adopt uniform policies
  4. establish a hierarchy of global and local policies

Answer(s): D



Viewing page 117 of 345
Viewing questions 581 - 585 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!