Free CISM Exam braindumps download (CISM exam dumps Free)

QUESTION: 241 Exam Topic: INFORMATION SECURITY GOVERNANCE

What is the PRIMARY objective of assigning classifications to information assets?

Identify appropriate levels of protection.
Identify business owners and information custodians.
Demonstrate compliance with regulatory requirements.
Maintain an accurate IT asset inventory.

Answer(s): A

QUESTION: 242 Exam Topic: INFORMATION SECURITY GOVERNANCE

An organization engages a third-party vendor to monitor and support a financial application under scrutiny by regulators. Maintaining strict data integrity and confidentiality for this application is critical to the business.
Which of the following controls would MOST effectively manage risk to the organization?

Implementing segregation of duties between systems and data
Activating access and data logging
Disabling vendor access and only re-enabling when access is needed
Implementing periodic access reviews of vendor employees

Answer(s): B

Show Answer Next Question

QUESTION: 243 Exam Topic: INFORMATION SECURITY GOVERNANCE

A regulatory compliance issue has been identified in a critical business application, but remediating the issue would significantly impact business operations. What information would BEST enable senior management to make an informed decision?