Which of the following approaches is BEST for selecting controls to minimize information security risks?
Answer(s): C
Which of the following is the MOST appropriate course of action when the risk occurrence rate is low but the impact is high?
Answer(s): A
Which of the following is the MOST effective way to communicate information security risk to senior management?
Security risk assessments should cover only information assets that:
Which of the following is an indicator of improvement in the ability to identify security risks?
Answer(s): D
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.