Free CISM Exam Braindumps
Certified Information Security Manager Questions 436–440 (page: 89)

Updated On: 10-Feb-2026

Which of the following is MOST important for an information security manager to ensure is included in a business case for a new security system?

  1. Effectiveness of controls
  2. Risk reduction associated with the system
  3. Audit-logging capabilities
  4. Benchmarking results

Answer(s): B



Risk management is MOST cost-effective:

  1. when performed on a continuous basis.
  2. while developing the business case for the security program.
  3. at the beginning of security program development.
  4. when integrated into other corporate assurance functions.

Answer(s): D



The MOST effective way to communicate the level of impact of information security risks on organizational objectives is to present:

  1. business impact analysis (BIA) results.
  2. detailed threat analysis results.
  3. risk treatment options.
  4. a risk heat map.

Answer(s): D



Senior management has decided to accept a significant risk within a security remediation plan. Which of the following is the information security manager's BEST course of action?

  1. Remediate the risk and document the rationale.
  2. Update the risk register with the risk acceptance.
  3. Communicate the remediation plan to the board of directors.
  4. Report the risk acceptance to regulatory agencies.

Answer(s): C



Which of the following is MOST important to consider when prioritizing threats during the risk assessment process?

  1. The criticality of threatened systems
  2. The severity of exploited vulnerabilities
  3. The potential impact on operations
  4. The capability of threat actors

Answer(s): A



Viewing page 89 of 345
Viewing questions 441 - 445 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!