QUESTION: 225

Which of the following would be MOST useful when illustrating to senior management the status of a recently implemented information security governance framework?

A risk assessment
A threat assessment
A maturity model
Periodic testing results

Answer(s): C

Show Answer Next Question

QUESTION: 226

Which of the following should be established FIRST when implementing an information security governance framework?

Security incident management team
Security awareness training program
Security architecture
Security policies

Answer(s): D

Show Answer Next Question

QUESTION: 227

Which is MOST important to identify when developing an effective information security strategy?

Business assets to be secured
Potential savings resulting from security governance
Compliance requirements
Control gaps that require remediation

Answer(s): A

Show Answer Next Question

QUESTION: 228

Which of the following is MOST important to consider when determining the effectiveness of the information security governance program?

Key performance indicators (KPIs)
Key risk indicators (KRIs)
Maturity models
Risk tolerance levels

Answer(s): A

Show Answer Next Question

Free ISACA CISM Exam Braindumps (page: 58)

QUESTION: 225

QUESTION: 226

QUESTION: 227

QUESTION: 228

CISM Exam Discussions & Posts