The MOST important reason to maintain key risk indicators (KRIs) is that:
Answer(s): A
In addition to cost, what is the BEST criteria for selecting countermeasures following a risk assessment?
Answer(s): C
Vulnerability scanning has detected a critical risk in a vital business application. Which of the following should the information security manager do FIRST?
Answer(s): B
A risk was identified during a risk assessment. The business process owner has chosen to accept the risk because the cost of remediation is greater than the projected cost of a worst-case scenario. What should be the information security manager's NEXT course of action?
Answer(s): D
An inexperienced information security manager is relying on its internal audit department to design and implement key security controls. Which of the following is the GREATEST risk?
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.