CISM Certification Exam Questions with AI Explanations

QUESTION: 171

Which of the following is the MOST important requirement for the successful implementation of security governance?

Implementing a security balanced scorecard
Performing an enterprise-wide risk assessment
Mapping to organizational strategies
Aligning to an international security framework

Answer(s): C

A large organization is in the process of developing its information security program that involves working with several complex organizational functions. Which of the following will BEST enable the successful implementation of this program?

Security governance
Security policy
Security metrics
Security guidelines

Answer(s): A

Reveal Solution Next Question

QUESTION: 173

Which of the following is a PRIMARY responsibility of an information security governance committee?

Analyzing information security policy compliance reviews
Approving the purchase of information security technologies
Reviewing the information security strategy
Approving the information security awareness training strategy

Answer(s): C

Reveal Solution Next Question

QUESTION: 174

An information security manager discovers that the organization’s new information security policy is not being followed across all departments. Which of the following should be of GREATEST concern to the information security manager?

Different communication methods may be required for each business unit.
Business unit management has not emphasized the importance of the new policy.
The corresponding controls are viewed as prohibitive to business operations.
The wording of the policy is not tailored to the audience.

Answer(s): C

Reveal Solution Next Question

QUESTION: 175

An organization has detected potential risk emerging from noncompliance with new regulations in its industry. Which of the following is the MOST important reason to report this situation to senior management?

The risk profile needs to be updated.
An external review of the risk needs to be conducted.
Specific monitoring controls need to be implemented.
A benchmark analysis needs to be performed.

Answer(s): A

Reveal Solution Next Question

ISACA Certified Information Security Manager CISM Dumps in PDF

Free ISACA CISM Real Questions (page: 35)

QUESTION: 171

QUESTION: 172

QUESTION: 173

QUESTION: 174

QUESTION: 175