Which of the following is the BEST course of action for the information security manager when residual risk is above the acceptable level of risk?
Answer(s): B
Which of the following is the BEST reason to initiate a reassessment of current risk?
Before final acceptance of residual risk, what is the BEST way for an information security manager to address risk factors determined to be lower than acceptable risk levels?
Answer(s): A
When selecting risk response options to manage risk, an information security manager’s MAIN focus should be on reducing:
Which of the following should an information security manager perform FIRST when an organization’s residual risk has increased?
Answer(s): D
Post your Comments and Discuss ISACA CISM exam prep with other Community members: