Free CISM Exam Braindumps
Certified Information Security Manager Questions 581–585 (page: 118)

Updated On: 10-Feb-2026

Threat and vulnerability assessments are important PRIMARILY because they are:

  1. needed to estimate risk
  2. the basis for setting control objectives
  3. elements of the organization’s security posture
  4. used to establish security investments

Answer(s): A



Which of the following is the PRIMARY goal of business continuity management?

  1. Establish incident response procedures.
  2. Assess the impact to business processes.
  3. Increase survivability of the organization.
  4. Implement controls to prevent disaster.

Answer(s): C



Which of the following should an information security manager establish FIRST to ensure security-related activities are adequately monitored?

  1. Internal reporting channels
  2. Accountability for security functions
  3. Scheduled security assessments
  4. Regular reviews of computer system logs

Answer(s): A



Which of the following should be done FIRST when establishing security measures for personal data stored and processed on a human resources management system?

  1. Conduct a privacy impact assessment (PIA).
  2. Evaluate data encryption technologies.
  3. Move the system into a separate network.
  4. Conduct a vulnerability assessment.

Answer(s): A



What is the role of the information security manager in finalizing contract negotiations with service providers?

  1. To update security standards for the outsourced process
  2. To ensure that clauses for periodic audits are included
  3. To obtain a security standard certification from the provider
  4. To perform a risk analysis on the outsourcing process

Answer(s): A



Viewing page 118 of 345
Viewing questions 586 - 590 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!