An information security manager has been asked to create a strategy to protect the organization’s information from a variety of threat vectors. Which of the following should be done FIRST?
Answer(s): B
Which of the following would BEST ensure that security risk assessment is integrated into the life cycle of major IT projects?
An information security manager has completed a risk assessment and has determined the residual risk. Which of the following should be the NEXT step?
Which of the following would be the BEST indicator that an organization is appropriately managing risk?
A large organization is considering a policy that would allow employees to bring their own smartphones into the organizational environment. The MOST important concern to the information security manager should be the:
Answer(s): D
https://www.isaca.org/Journal/archives/2013/Volume-4/Pages/Leveraging-and-Securing-the-Bring-Your-Own-Device-and-Technology-Approach.aspx
Post your Comments and Discuss ISACA CISM exam prep with other Community members: