CISM Exam dumps PDF | Exam-Dumps.net (Page: 30)

QUESTION: 146

In addition to business alignment and security ownership, which of the following is MOST critical for information security governance?

Auditability of systems
Compliance with policies
Reporting of security metrics
Executive sponsorship

Answer(s): A

Reveal Solution Next Question

Senior management has allocated funding to each of the organization’s divisions to address information security vulnerabilities. The funding is based on each division’s technology budget from the previous fiscal year. Which of the following should be of GREATEST concern to the information security manager?

Areas of highest risk may not be adequately prioritized for treatment
Redundant controls may be implemented across divisions
Information security governance could be decentralized by division
Return on investment may be inconsistently reported to senior management

Answer(s): A

Reveal Solution Next Question

QUESTION: 148

The effectiveness of an information security governance framework will BEST be enhanced if:

IS auditors are empowered to evaluate governance activities
risk management is built into operational and strategic activities
a culture of legal and regulatory compliance is promoted by management
consultants review the information security governance framework

Answer(s): D

Reveal Solution Next Question

QUESTION: 149

When developing an information security governance framework, which of the following would be the MAINimpact when lacking senior management involvement?

Accountability for risk treatment is not clearly defined.
Information security responsibilities are not communicated effectively.
Resource requirements are not adequately considered.
Information security plans do not support business requirements.

Answer(s): C

Reveal Solution Next Question

QUESTION: 150

Which of the following is the BEST way to facilitate the alignment between an organization’s information security program and business objectives?

Information security is considered at the feasibility stage of all IT projects.
The information security governance committee includes representation from key business areas.
The chief executive officer reviews and approves the information security program.
The information security program is audited by the internal audit department.

Answer(s): B

Reveal Solution Next Question

ISACA CISM Exam (page: 30)
ISACA Certified Information Security Manager
Updated on: 31-Mar-2026

QUESTION: 146

QUESTION: 147

QUESTION: 148

QUESTION: 149

QUESTION: 150

ISACA CISM Exam (page: 30) ISACA Certified Information Security Manager Updated on: 31-Mar-2026

QUESTION: 146

QUESTION: 147

QUESTION: 148

QUESTION: 149

QUESTION: 150

ISACA CISM Exam (page: 30)
ISACA Certified Information Security Manager
Updated on: 31-Mar-2026