QUESTION: 201

Which of the following is MOST critical for an effective information security governance framework?

Board members are committed to the information security program.
Information security policies are reviewed on a regular basis.
The information security program is continually monitored.
The CIO is accountable for the information security program.

Answer(s): A

Show Answer Next Question

QUESTION: 202

Which of the following is MOST important when establishing a successful information security governance framework?

Selecting information security steering committee members
Developing an information security strategy
Determining balanced scorecard metrics for information security
Identifying information security risk scenarios

Answer(s): B

Show Answer Next Question

QUESTION: 203

When creating an information security governance program, which of the following will BEST enable the organization to address regulatory compliance requirements?

Guidelines for processes and procedures
A security control framework
An approved security strategy plan
Input from the security steering committee

Answer(s): A

Show Answer Next Question

An organization enacted several information security policies to satisfy regulatory requirements. Which of the following situations would MOST likely increase the probability of noncompliance to these requirements?

Inadequate buy-in from system owners to support the policies
Availability of security policy documents on a public website
Lack of training for end users on security policies
Lack of an information security governance framework

Answer(s): A

Show Answer Next Question

Free ISACA CISM Exam Braindumps (page: 52)

QUESTION: 201

QUESTION: 202

QUESTION: 203

QUESTION: 204

CISM Exam Discussions & Posts