CISM Exam dumps PDF | Exam-Dumps.net (Page: 41)

QUESTION: 201

Which of the following is MOST critical for an effective information security governance framework?

Board members are committed to the information security program.
Information security policies are reviewed on a regular basis.
The information security program is continually monitored.
The CIO is accountable for the information security program.

Answer(s): A

Reveal Solution Next Question

QUESTION: 202

Which of the following is MOST important when establishing a successful information security governance framework?

Selecting information security steering committee members
Developing an information security strategy
Determining balanced scorecard metrics for information security
Identifying information security risk scenarios

Answer(s): B

Reveal Solution Next Question

QUESTION: 203

When creating an information security governance program, which of the following will BEST enable the organization to address regulatory compliance requirements?

Guidelines for processes and procedures
A security control framework
An approved security strategy plan
Input from the security steering committee

Answer(s): A

Reveal Solution Next Question

An organization enacted several information security policies to satisfy regulatory requirements. Which of the following situations would MOST likely increase the probability of noncompliance to these requirements?

Inadequate buy-in from system owners to support the policies
Availability of security policy documents on a public website
Lack of training for end users on security policies
Lack of an information security governance framework

Answer(s): A

Reveal Solution Next Question

QUESTION: 205

Which of the following is the BEST evidence that an organization's information security governance framework is effective?

Threats to the organization have diminished.
The risk register is reviewed annually.
The framework focuses primarily on technical controls.
The framework can adapt to organizational changes.

Answer(s): A

Reveal Solution Next Question

ISACA CISM Exam (page: 41)
ISACA Certified Information Security Manager
Updated on: 05-Apr-2026

QUESTION: 201

QUESTION: 202

QUESTION: 203

QUESTION: 204

QUESTION: 205

ISACA CISM Exam (page: 41) ISACA Certified Information Security Manager Updated on: 05-Apr-2026

QUESTION: 201

QUESTION: 202

QUESTION: 203

QUESTION: 204

QUESTION: 205

ISACA CISM Exam (page: 41)
ISACA Certified Information Security Manager
Updated on: 05-Apr-2026