An organization’s marketing department wants to use an online collaboration service which is not in compliance with the information security policy. A risk assessment is performed, and risk acceptance is being pursued. Approval of risk acceptance should be provided by:
Answer(s): B
The risk of mishandling alerts identified by an intrusion detection system (IDS) would be the GREATESTwhen:
Answer(s): A
An information security manager has been informed of a new vulnerability in an online banking application, and patch to resolve this issue is expected to be released in the next 72 hours. The information security manager’s MOST important course of action should be to:
An information security manager has recently been notified of potential security risks associated with a third- party service provider. What should be done NEXT to address this concern?
In risk assessment, after the identification of threats to organizational assets, the information security manager would:
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.