Mitigating technology risks to acceptable levels should be based PRIMARILY upon:
Answer(s): B
After assessing risk, the decision to treat the risk should be based PRIMARILY on:
Which of the following is the MOST important prerequisite to performing an information security risk assessment?
Answer(s): D
When preventative controls to appropriately mitigate risk are not feasible, which of the following is the MOSTimportant action for the information security manager to perform?
Reevaluation of risk is MOST critical when there is:
Answer(s): C
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.