CISM Exam Questions and Answers | Exam-Dumps (Page: 16)

QUESTION: 76

A security manager meeting the requirements for the international flow of personal data will need to ensure:

a data processing agreement.
a data protection registration.
the agreement of the data subjects.
subject access procedures.

Answer(s): C

Explanation:

Whenever personal data are transferred across national boundaries, the awareness and agreement of the data subjects are required. Choices A, B and D are supplementary data protection requirements that are not key for international data transfer.

Reveal Solution Next Question

QUESTION: 77

An information security manager mapping a job description to types of data access is MOST likely to adhere to which of the following information security principles?

Ethics
Proportionality
Integration
Accountability

Answer(s): B

Explanation:

Information security controls should be proportionate to the risks of modification, denial of use or disclosure of the information. It is advisable to learn if the job description is apportioning more data than are necessary for that position to execute the business rules (types of data access). Principles of ethics and integration have the least to do with mapping job description to types of data access. The principle of accountability would be the second most adhered to principle since people with access to data may not always be accountable but may be required to perform an operation.

Reveal Solution Next Question

QUESTION: 78

Which of the following is the MOST important prerequisite for establishing information security management within an organization?

Senior management commitment
Information security framework
Information security organizational structure
Information security policy

Answer(s): A

Explanation:

Senior management commitment is necessary in order for each of the other elements to succeed. Without senior management commitment, the other elements will likely be ignored within the organization.

Reveal Solution Next Question

QUESTION: 79

What will have the HIGHEST impact on standard information security governance models?

Number of employees
Distance between physical locations
Complexity of organizational structure
Organizational budget

Answer(s): C

Explanation:

Information security governance models are highly dependent on the overall organizational structure. Some of the elements that impact organizational structure are multiple missions and functions across the organization, leadership and lines of communication. Number of employees and distance between physical locations have less impact on information security governance models since well-defined process, technology and people components intermingle to provide the proper governance. Organizational budget is not a major impact once good governance models are in place; hence governance will help in effective management of the organization's budget.

Reveal Solution Next Question

QUESTION: 80

In order to highlight to management, the importance of integrating information security in the business
processes, a newly hired information security officer should FIRST:

prepare a security budget.
conduct a risk assessment.
develop an information security policy.
obtain benchmarking information.

Answer(s): B

Explanation:

Risk assessment, evaluation and impact analysis will be the starting point for driving management's attention to information security. All other choices will follow the risk assessment.

Reveal Solution Next Question

ISACA CISM Exam (page: 16) ISACA Certified Information Security Manager Updated on: 25-Dec-2025

QUESTION: 76

Explanation:

QUESTION: 77

Explanation:

QUESTION: 78

Explanation:

QUESTION: 79

Explanation:

QUESTION: 80

Explanation:

ISACA CISM Exam (page: 16)
ISACA Certified Information Security Manager
Updated on: 25-Dec-2025