Free CISM Exam braindumps download (CISM exam dumps Free)

QUESTION: 916 Exam Topic: INFORMATION SECURITY PROGRAM MANAGEMENT

Which of the following is the BEST way to demonstrate to senior management that organizational security practices comply with industry standards?

Results of an independent assessment
Up-to-date policy and procedures documentation
A report on the maturity of controls
Existence of an industry-accepted framework

Answer(s): A

Show Answer Next Question

QUESTION: 917 Exam Topic: INFORMATION SECURITY PROGRAM MANAGEMENT

The BEST way to report to the board on the effectiveness of the information security program is to present:

a dashboard illustrating key performance metrics.
peer-group industry benchmarks.
a summary of the most recent audit findings.
a report of cost savings from process improvements.

Answer(s): A

Show Answer Next Question

QUESTION: 918 Exam Topic: INFORMATION SECURITY PROGRAM MANAGEMENT

The BEST way to identify the criticality of systems to the business is through:

a threat assessment.
an asset classification.
a vulnerability assessment.
an impact assessment.

Answer(s): B

Show Answer Next Question

QUESTION: 919 Exam Topic: INFORMATION SECURITY PROGRAM MANAGEMENT

Senior management has expressed concern that the organization’s intrusion prevention system may repeatedly disrupt business operations. Which of the following BEST indicates that the information security manager has tuned the system to address this concern?