Question 821 · 1243 in bank
An online bank identifies a successful network attack in progress. The bank should FIRST:
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
An online bank identifies a successful network attack in progress. The bank should FIRST:
Answer: B
When developing an escalation process for an incident response plan, the information security manager should PRIMARILY consider the:
Answer: A
When developing an escalation process for an incident response plan, the information security manager should PRIMARILY consider the affected stakeholders. The escalation process should be designed to ensure that the appropriate stakeholders are notified at the appropriate time, in order to minimize the impact of the incident on the organization. Stakeholders could include executives, legal counsel, IT teams, customers, vendors, and regulatory bodies, depending on the nature of the incident.
Source: Adapted from community discussion — Abhey
Which of the following provides an information security manager with the MOST accurate indication of the organization's ability to respond to a cyber attack?
Answer: D
Which of the following would be MOST helpful to identify worst-case disruption scenarios?
Answer: D
D. Business impact analysis (BIA) A Business Impact Analysis (BIA) is specifically designed to identify and assess worst-case disruption scenarios. During a BIA, an organization systematically examines its critical business processes, identifies potential threats and vulnerabilities, and assesses the potential impact of disruptions to those processes. This analysis helps the organization understand the potential consequences of various scenarios, including worst-case situations, and prioritize its continuity and recovery efforts accordingly.
Source: Adapted from community discussion — oluchecpoint
Which of the following BEST enables an organization to appropriately prioritize information security-focused projects?
Answer: C
The Correct Answer is (C) Organizational Risk Appetite as the focus is on an information security-focused project, while the others are not. (i.e. need to know what level of risk is important to know how to prioritize) Rationale: A. Return on investment (ROI) is a financial instrument that looks for the best possible return. While this is ideal for projects that make money, this isn't ideal for security cause security projects cost money. Using an ROI model will make everything just a race to the bottom. Instead, it should be focused on risk. B. Privacy compliance requirements: Compliance does not mean secure. D. Historical security incidents: Past performance does not mean that it is reflective of future occurrences. It is only a context of what has occurred in the past.
Source: Adapted from community discussion — dark_3k03r
Which of the following should an information security manager do FIRST upon learning that some security hardening settings may negatively impact future business activity?
Answer: C
From the ISACA CISM exam perspective, the MOST appropriate first step an information security manager should take upon learning that some security hardening settings may negatively impact future business activity is option C: Perform a risk assessment. Performing a risk assessment involves evaluating the potential impact and likelihood of risks associated with the security hardening settings. By conducting a risk assessment, the information security manager can gather the necessary information to make informed decisions about balancing security requirements with business needs. This step allows for a systematic analysis of the risks involved, considering factors such as the likelihood of occurrence, potential impact, and the organization's risk appetite.
Source: Adapted from community discussion — mad68
Which of the following activities MUST be performed by an information security manager for change requests?
Answer: A
A. This answer is from prior work experience. When a change is requested, Cybersecurity performs SIA (System Impact Analysis) to determine if the change will affect the system baseline. If the change does not, cyber will waive further actions, but if there is impact, ATO will need to be revised and approved. ATO involves tedious process by the way.
Source: Adapted from community discussion — Uncle_Lucifer
The PRIMARY purpose for continuous monitoring of security controls is to ensure:
Answer: B
Which of the following is the MOST important factor of a successful information security program?
Answer: B
Please refer to ISACA Review manual Page 142, 3.1.2: ‘Three elements are essential to ensure successful security program design, implementation and ongoing management: 1. The program must demonstrate execution of a well-developed information security strategy that is closely aligned with and supports organizational objectives. 2nd is management & stakeholder support 3rd is metrics Risk management output is used in development of strategy; IS program being the project plan for implementation strategy.
Source: Adapted from community discussion — CISSPST
Which of the following messages would be MOST effective in obtaining senior management's commitment to information security management?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 821. 1243 questions available.
Version 1.0.0. How we source questions