Free CISM Exam Braindumps
Certified Information Security Manager Questions 611–615 (page: 124)

Updated On: 10-Feb-2026

What should be the PRIMARY objective of conducting interviews with business unit managers when developing an information security strategy?

  1. Determine information types
  2. Obtain information on departmental goals
  3. Identify data and system ownership
  4. Classify information assets

Answer(s): B



Which of the following is MOST important to consider when developing a disaster recovery plan?

  1. Business continuity plan (BCP)
  2. Business impact analysis (BIA)
  3. Cost-benefit analysis
  4. Feasibility assessment

Answer(s): B



Which of the following is the MOST effective approach for integrating security into application development?

  1. Defining security requirements
  2. Performing vulnerability scans
  3. Including security in user acceptance testing sign-off
  4. Developing security models in parallel

Answer(s): A



Which of the following should be of MOST influence to an information security manager when developing IT security policies?

  1. Past and current threats
  2. IT security framework
  3. Compliance with regulations
  4. Business strategy

Answer(s): D



Which of the following contributes MOST to the effective implementation of an information security strategy?

  1. Reporting of security metrics
  2. Regular security awareness training
  3. Endorsement by senior management
  4. Implementation of security standards

Answer(s): C



Viewing page 124 of 345
Viewing questions 616 - 620 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!