An information security manager is asked to provide a short presentation on the organization’s current IT risk posture to the board of directors. Which of the following would be MOST effective to include in this presentation?
Answer(s): A
The MOST likely reason to use qualitative security risk assessments instead of quantitative methods is when:
The PRIMARY objective of a risk response strategy should be:
An organization is concerned with the risk of information leakage caused by incorrect use of personally owned smart devices by employees. What is the BEST way for the information security manager to mitigate the associated risk?
Answer(s): B
When determining an acceptable risk level, which of the following is the MOST important consideration?
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.