Free CISM Exam Braindumps
Certified Information Security Manager Questions 811–815 (page: 164)

Updated On: 10-Feb-2026

In the development of an information security strategy, recovery time objectives (RTOs) will serve as indicators of:

  1. senior management support
  2. open vulnerabilities
  3. risk tolerances
  4. maturity levels

Answer(s): C



Which of the following is MOST important to include when developing a business case for information security resources?

  1. Senior management input
  2. Gap analysis
  3. Cost-benefit analysis
  4. Risk assessment

Answer(s): C



Management has expressed concern that they are not kept fully informed of key information security risks associated with the organization. Which of the following should be done FIRST to address this concern?

  1. Prepare a presentation on information security initiatives for management
  2. Provide a report on information security industry trends and benchmarks
  3. Determine the desired metrics and develop a reporting schedule
  4. Develop an ongoing risk and security awareness training program for management

Answer(s): C



Which of the following is the FIRST step in developing a business continuity plan (BCP)?

  1. Identify the applications with the shortest recovery time objectives (RTOs)
  2. Determine the business recovery strategy
  3. Identify critical business processes
  4. Determine available resources

Answer(s): C



Which of the following should be the PRIMARY objective when establishing a new information security program?

  1. Executing the security strategy
  2. Optimizing resources
  3. Facilitating operational security
  4. Achieving regulatory compliance

Answer(s): A



Viewing page 164 of 345
Viewing questions 816 - 820 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!