Which of the following roles is PRIMARILY responsible for developing an information classification framework based on business needs?
Answer(s): C
Which of the following is MOST important to determine before developing information security program metrics?
Answer(s): D
When outsourcing application development to a third party, which of the following is the BEST way to ensure the organization's security requirements are met?
Effective information security policies should be PRIMARILY developed based on:
A company is considering a new automated system that requires implementation of wireless devices for data capture. Even though wireless is not an approved technology, senior management has accepted the risk and approved a Proof-of-Concept (POC) to evaluate the technology and proposed solution. Which of the following is the information security manager's BEST course of action?
Answer(s): A
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.