Which of the following is the BEST way to determine if an information security program aligns with corporate governance?
Answer(s): C
One of the most important aspects of the action plan to execute the strategy is to create or modify, as needed, policies and standards. Policies are one of the primary elements of governance and each policy should state only one general security mandate. The road map should show the steps and the sequence, dependencies, and milestones.
Security governance is MOST associated with which of the following IT infrastructure components?
Answer(s): D
Which of the following is the PRIMARY advantage of having an established information security governance framework in place when an organization is adopting emerging technologies?
Answer(s): B
Which of the following is the MOST appropriate board-level activity for information security governance?
Answer(s): A
Business units within an organization are resistant to proposed changes to the information security program. Which of the following is the BEST way to address this issue?
Post your Comments and Discuss ISACA CISM exam prep with other Community members: