Free CISM Exam Braindumps
Certified Information Security Manager Questions 466–470 (page: 95)

Updated On: 10-Feb-2026

Ongoing tracking of remediation efforts to mitigate identified risks can BEST be accomplished through the use of which of the following?

  1. Tree diagrams
  2. Venn diagrams
  3. Heat charts
  4. Bar charts

Answer(s): C

Explanation:

Meat charts, sometimes referred to as stoplight charts, quickly and clearly show the current status of remediation efforts. Venn diagrams show the connection between sets; tree diagrams are useful for decision analysis; and bar charts show relative size.



Information security policies should be designed PRIMARILY on the basis of:

  1. business demands.
  2. inherent risks
  3. international standards.
  4. business risks.

Answer(s): D



If the inherent risk of a business activity is higher than the acceptable risk level, the information security manager should FIRST:

  1. implement controls to mitigate the risk to an acceptable level.
  2. recommend that management avoids the business activity.
  3. assess the gap between current and acceptable level of risk.
  4. transfer risk to a third party to avoid cost of impact.

Answer(s): C



Several identified risks have been mitigated to an acceptable level with appropriate controls. Which of the following activities would BEST help to maintain acceptable risk levels?

  1. Frequent assessments of inherent risks
  2. Periodic reviews of changes to the environment
  3. Periodic cost-benefit analyses of the implemented controls
  4. Frequent assessments of risk action plans

Answer(s): A



Which of the following should be the PRIMARY basis for determining risk appetite?

  1. Organizational objectives
  2. Senior management input
  3. Industry benchmarks
  4. Independent audit results

Answer(s): A



Viewing page 95 of 345
Viewing questions 471 - 475 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!