QUESTION: 161

The MOST important element in achieving executive commitment to an information security governance program is:

a defined security framework
identified business drivers
established security strategies
a process improvement model

Answer(s): B

QUESTION: 162

After implementing an information security governance framework, which of the following would provide the
BEST information to develop an information security project plan?

Risk heat map
Recent audit results
Balanced scorecard
Gap analysis

Answer(s): C

Reveal Solution Next Question

QUESTION: 163

An information security manager’s PRIMARY objective for presenting key risks to the board of directors is to:

meet information security compliance requirements.
ensure appropriate information security governance.
quantity reputational risks.
re-evaluate the risk appetite.

Answer(s): B

Reveal Solution Next Question

QUESTION: 164

Which of the following is MOST helpful in integrating information security governance with corporate governance?

Assigning the implementation of information security governance to the steering committee.
Including information security processes within operational and management processes.
Providing independent reports of information security efficiency and effectiveness to the board.
Aligning the information security governance to a globally accepted framework.

Answer(s): B

Reveal Solution Next Question

Free CISM Exam Braindumps (page: 42)

QUESTION: 161

QUESTION: 162

QUESTION: 163

QUESTION: 164

CISM Exam Discussions & Posts