QUESTION: 169

When establishing an information security governance framework, it is MOST important for an information security manager to understand:

the regulatory environment.
information security best practices.
the corporate culture.
risk management techniques.

Answer(s): A

Show Answer Next Question

QUESTION: 170

Which of the following is a PRIMARY responsibility of the information security governance function?

Defining security strategies to support organizational programs
Ensuring adequate support for solutions using emerging technologies
Fostering a risk-aware culture to strengthen the information security program
Advising senior management on optimal levels of risk appetite and tolerance

Answer(s): A

Show Answer Next Question

QUESTION: 171

Which of the following is the MOST important requirement for the successful implementation of security governance?

Implementing a security balanced scorecard
Performing an enterprise-wide risk assessment
Mapping to organizational strategies
Aligning to an international security framework

Answer(s): C

Show Answer Next Question

A large organization is in the process of developing its information security program that involves working with several complex organizational functions. Which of the following will BEST enable the successful implementation of this program?

Security governance
Security policy
Security metrics
Security guidelines

Answer(s): A

Show Answer Next Question

Free ISACA CISM Exam Braindumps (page: 44)

QUESTION: 169

QUESTION: 170

QUESTION: 171

QUESTION: 172

CISM Exam Discussions & Posts