QUESTION: 141

Which of the following is the BEST way to determine if an information security program aligns with corporate governance?

Evaluate funding for security initiatives
Survey end users about corporate governance
Review information security policies
Review the balanced scorecard

Answer(s): C

Explanation:

One of the most important aspects of the action plan to execute the strategy is to create or modify, as needed, policies and standards. Policies are one of the primary elements of governance and each policy should state only one general security mandate. The road map should show the steps and the sequence, dependencies, and milestones.

Reveal Solution Next Question

QUESTION: 142

Security governance is MOST associated with which of the following IT infrastructure components?

Network
Application
Platform
Process

Answer(s): D

Reveal Solution Next Question

QUESTION: 143

Which of the following is the PRIMARY advantage of having an established information security governance framework in place when an organization is adopting emerging technologies?

An emerging technologies strategy is in place
An effective security risk management process is established
End user acceptance of emerging technologies is established
A cost-benefit analysis process is easier to perform

Answer(s): B

Reveal Solution Next Question

QUESTION: 144

Which of the following is the MOST appropriate board-level activity for information security governance?

Establish security and continuity ownership
Develop “what-if” scenarios on incidents
Establish measures for security baselines
Include security in job-performance appraisals

Answer(s): A

Reveal Solution Next Question

Free CISM Exam Braindumps (page: 37)

QUESTION: 141

Explanation:

QUESTION: 142

QUESTION: 143

QUESTION: 144

CISM Exam Discussions & Posts