CISM Certification Exam Questions with AI Explanations

QUESTION: 141

Which of the following is the BEST way to determine if an information security program aligns with corporate governance?

Evaluate funding for security initiatives
Survey end users about corporate governance
Review information security policies
Review the balanced scorecard

Answer(s): C

Explanation:

One of the most important aspects of the action plan to execute the strategy is to create or modify, as needed, policies and standards. Policies are one of the primary elements of governance and each policy should state only one general security mandate. The road map should show the steps and the sequence, dependencies, and milestones.

Reveal Solution Next Question

QUESTION: 142

Security governance is MOST associated with which of the following IT infrastructure components?

Network
Application
Platform
Process

Answer(s): D

Reveal Solution Next Question

QUESTION: 143

Which of the following is the PRIMARY advantage of having an established information security governance framework in place when an organization is adopting emerging technologies?

An emerging technologies strategy is in place
An effective security risk management process is established
End user acceptance of emerging technologies is established
A cost-benefit analysis process is easier to perform

Answer(s): B

Reveal Solution Next Question

QUESTION: 144

Which of the following is the MOST appropriate board-level activity for information security governance?

Establish security and continuity ownership
Develop “what-if” scenarios on incidents
Establish measures for security baselines
Include security in job-performance appraisals

Answer(s): A

Reveal Solution Next Question

QUESTION: 145

Business units within an organization are resistant to proposed changes to the information security program. Which of the following is the BEST way to address this issue?

Implementing additional security awareness training
Communicating critical risk assessment results to business unit managers
Including business unit representation on the security steering committee
Publishing updated information security policies

Answer(s): B

Reveal Solution Next Question

ISACA Certified Information Security Manager CISM Dumps in PDF

Free ISACA CISM Real Questions (page: 29)

QUESTION: 141

Explanation:

QUESTION: 142

QUESTION: 143

QUESTION: 144

QUESTION: 145