Question 51 · 1243 in bank
An organization's information security team presented the risk register at a recent information security steering committee meeting. Which of the following should be of MOST concern to the committee?
Show answer
Answer: A
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
An organization's information security team presented the risk register at a recent information security steering committee meeting. Which of the following should be of MOST concern to the committee?
Answer: A
Which of the following BEST enables an organization to determine what activities and changes have occurred on a system during a cybersecurity incident?
Answer: C
Which of the following should the information security manager do FIRST upon learning that a business department wants to use blockchain technology for a new payment process?
Answer: C
Which of the following BEST facilitates the development of information security procedures that effectively support the information security policy?
Answer: B
A - Industry best practices provide proven guidelines and standards for implementing effective security procedures. However for B, it focuses on identifying the sensitivity of data rather than directly facilitating procedure development
Source: Adapted from community discussion — Booict
Which of the following would provide the BEST input to a business case for a technical solution to address potential system vulnerabilities?
Answer: C
A risk assessment provides a comprehensive view of potential threats, vulnerabilities, and the associated impacts on the business. It helps prioritize risks and justifies the need for a technical solution by outlining the potential consequences of inaction. While the other options (BIA, vulnerability scan results, and penetration test results) provide valuable information, they are more focused on specific aspects rather than the overall risk profile, which is crucial for a business case.
Source: Adapted from community discussion — koala_lay
Which of the following is MOST helpful for determining priorities when creating a long-term information security roadmap?
Answer: B
The steering committee typically includes representatives from various parts of the organization, including IT, business units, and executive management. Their input would be helpful when creating a long term roadmap.
Source: Adapted from community discussion — Johnny3tears
A KEY consideration in the use of quantitative risk analysis is that it:
Answer: B
Which of the following is MOST important when selecting an information security metric?
Answer: B
Ensuring repeatability is important when selecting an information security metric, but it is not the most important factor. Repeatable metrics provide consistent and reliable data, which is crucial for tracking progress over time and making comparisons. However, repeatability alone is not enough to ensure that the metric is useful and meaningful. Aligning the metric to the IT strategy and ensuring that it supports the overall objectives of the organization is more critical, as this will ensure that the metric provides relevant and valuable information that can be used to drive meaningful improvements in information security.
Source: Adapted from community discussion — Broesweelies
A situation where an organization has unpatched IT systems in violation of the patching policy should be treated as:
Answer: C
How does data discovery assist with data classification?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 51. 1243 questions available.
Version 1.0.0. How we source questions