QUESTION: 153

Internal audit has reported a number of information security issues which are not in compliance with regulatory requirements. What should the information security manager do FIRST?

Create a security exception
Perform a vulnerability assessment
Perform a gap analysis to determine needed resources
Assess the risk to business operations

Answer(s): C

Reveal Solution Next Question

QUESTION: 154

Which of the following is the MOST important reason for an organization to develop an information security governance program?

Establishment of accountability
Compliance with audit requirements
Monitoring of security incidents
Creation of tactical solutions

Answer(s): B

Reveal Solution Next Question

QUESTION: 155

The PRIMARY purpose of aligning information security with corporate governance objectives is to:

build capabilities to improve security processes.
consistently manage significant areas of risk.
identify an organization’s tolerance for risk.
re-align roles and responsibilities.

Answer(s): A

Reveal Solution Next Question

QUESTION: 156

Which of the following is the MOST important consideration for designing an effective information security governance framework?

Defined security metrics
Continuous audit cycle
Security policy provisions
Security controls automation

Answer(s): A

Reveal Solution Next Question

Free CISM Exam Braindumps (page: 40)

QUESTION: 153

QUESTION: 154

QUESTION: 155

QUESTION: 156

CISM Exam Discussions & Posts