QUESTION: 233

Which of the following is MOST important for guiding the development and management of a comprehensive information security program?

Adopting information security program management best practices
Implementing policies and procedures to address the information security strategy
Establishing and maintaining an information security governance framework
Aligning the organization's business objectives with IT objectives

Answer(s): C

Show Answer Next Question

QUESTION: 234

Which of the following is the BEST way for senior leadership to demonstrate commitment for an effective information security strategy?

Appointing the top information security role to report to the CEO
Communicating organizational risk appetite and tolerance
Approving a comprehensive risk management program
Allocating adequate resources for information security

Answer(s): D

Show Answer Next Question

An organization is considering the adoption of cloud service providers for its expanding global business operations. Which of the following is MOST important for the information security manager to review with regard to data protection?

Data privacy policy
Security policy and standards
Organizational requirements
Local laws and regulations

Answer(s): A

Show Answer Next Question

QUESTION: 236

In a multinational organization, local security regulations should be implemented over global security policy because:

deploying awareness of local regulations is more practical than of global policy.
global security policies include unnecessary controls for local businesses.
business objectives are defined by local business unit managers.
requirements of local regulations take precedence.

Answer(s): D

Show Answer Next Question

Free ISACA CISM Exam Braindumps (page: 60)

QUESTION: 233

QUESTION: 234

QUESTION: 235

QUESTION: 236

CISM Exam Discussions & Posts