Free CISM Exam Braindumps
Certified Information Security Manager Questions 696–700 (page: 141)

Updated On: 10-Feb-2026

After adopting an information security framework, an information security manager is working with senior management to change the organization-wide perception that information security is solely the responsibility of the information security department. To achieve this objective, what should be the information security
manager's FIRST initiative?

  1. Develop an operational plan providing best practices for information security projects.
  2. Develop an information security awareness campaign with senior management's support.
  3. Document and publish the responsibilities of the information security department.
  4. Implement a formal process to conduct periodic compliance reviews.

Answer(s): B



An information security manager is developing a new information security strategy.

Which of the following functions would serve as the BEST resource to review the strategy and provide guidance for business alignment?

  1. Internal audit
  2. The steering committee
  3. The legal department
  4. The board of directors

Answer(s): B



When integrating information security requirements into software development, which of the following practices should be FIRST in the development lifecycle?

  1. Penetration testing
  2. Dynamic code analysis
  3. Threat modeling
  4. Source code review

Answer(s): C



Which of the following should be an information security manager's PRIMARY focus during the development of a critical system storing highly confidential data?

  1. Ensuring the amount of residual risk is acceptable
  2. Reducing the number of vulnerabilities detected
  3. Avoiding identified system threats
  4. Complying with regulatory requirements

Answer(s): D



When developing a protection strategy for outsourcing applications, the information security manager MUSTensure that:

  1. escrow agreements are in place.
  2. the security requirements are included in the service level agreement (SLA).
  3. the responsibility for security is transferred in the service level agreement (SLA).
  4. nondisclosure clauses are in the contract.

Answer(s): B



Viewing page 141 of 345
Viewing questions 701 - 705 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!