QUESTION: 193

Which of the following is MOST important to the successful implementation of an information security governance framework across the organization?

Organizational security controls deployed in line with regulations
Security management processes aligned with security objectives
The existing organizational security culture
Security policies that adhere to industry best practices

Answer(s): B

Show Answer Next Question

QUESTION: 194

Which of the following is the MOST effective way to achieve the integration of information security governance into corporate governance?

Align information security budget requests to organizational goals
Ensure information security efforts support business goals
Provide periodic IT balanced scorecards to senior management
Ensure information security aligns with IT strategy

Answer(s): A

Show Answer Next Question

QUESTION: 195

To gain a clear understanding of the impact that a new regulatory requirement will have on an organization’s information security controls, an information security manager should FIRST:

interview senior management
conduct a risk assessment
conduct a cost-benefit analysis
perform a gap analysis

Answer(s): D

Show Answer Next Question

QUESTION: 196

The PRIMARY purpose of implementing information security governance metrics is to:

measure alignment with best practices.
assess operational and program metrics.
refine control operations,
guide security towards the desired state.

Answer(s): D

Show Answer Next Question

Free ISACA CISM Exam Braindumps (page: 50)

QUESTION: 193

QUESTION: 194

QUESTION: 195

QUESTION: 196

CISM Exam Discussions & Posts