Isaca CISM Practice Test - Questions Answers, Page 21

A financial company executive is concerned about recently increasing cyberattacks and needs to take action to reduce risk. The organization would BEST respond by:

An organization's HR department requires that employee account privileges be removed from all corporate IT systems within three days of termination to comply with a government regulation However, the systems all have different user directories, and it currently takes up to four weeks to remove the privileges Which of the following would BEST enable regulatory compliance?

Which of the following is MOST important to convey to employees in building a security risk-aware culture?

To overcome the perception that security is a hindrance to business activities, it is important for an information security manager to:

A risk assessment exercise has identified the threat of a denial of service (DoS) attack Executive management has decided to take no further action related to this risk. The MO ST likely reason for this decision is:

Which of the following will provide the MOST guidance when deciding the level of protection for an information asset?

Which of the following is the MOST effective way to demonstrate alignment of information security strategy with business objectives?

Which of the following is the BEST approach to make strategic information security decisions?

Which of the following is the BEST way to obtain support for a new organization-wide information security program?