QUESTION: 185

Which of the following should be the PRIMARY expectation of management when an organization introduces an information security governance framework?

Optimized information security resources
Consistent execution of information security strategy
Improved accountability to shareholders
Increased influence of security management

Answer(s): B

Show Answer Next Question

QUESTION: 186

Which of the following is the BEST approach for an information security manager when developing new information security policies?

Create a stakeholder map.
Reference an industry standard.
Establish an information security governance committee.
Download a policy template.

Answer(s): C

Show Answer Next Question

QUESTION: 187

When supporting a large corporation’s board of directors in the development of governance, which of the following is the PRIMARY function of the information security manager?

Gaining commitment of senior management
Preparing the security budget
Providing advice and guidance
Developing a balanced scorecard

Answer(s): C

Show Answer Next Question

QUESTION: 188

When making an outsourcing decision, which of the following functions is MOST important to retain within the organization?

Security management
Incident response
Risk assessment
Security governance

Answer(s): D

Show Answer Next Question

Free ISACA CISM Exam Braindumps (page: 48)

QUESTION: 185

QUESTION: 186

QUESTION: 187

QUESTION: 188

CISM Exam Discussions & Posts