Isaca CISM Practice Test - Questions Answers, Page 30

An organization faces severe fines and penalties if not in compliance with local regulatory requirements by an established deadline. Senior management has asked the information security manager to prepare an action plan to achieve compliance.

Which of the following would provide the MOST useful information for planning purposes?

Which of the following documents should contain the INITIAL prioritization of recovery of services?

A newly appointed information security manager of a retailer with multiple stores discovers an HVAC (heating, ventilation, and air conditioning) vendor has remote access to the stores to enable real-time monitoring and equipment diagnostics. Which of the following should be the information security manager's FIRST course of action?

A balanced scorecard MOST effectively enables information security:

When creating an incident response plan, the PRIMARY benefit of establishing a clear definition of a security incident is that it helps to:

Which of the following is the PRIMARY responsibility of an information security manager in an organization that is implementing the use of company-owned mobile devices in its operations?

An organization permits the storage and use of its critical and sensitive information on employee-owned smartphones. Which of the following is the BEST security control?

Labeling information according to its security classification:

Which of the following is the GREATEST benefit of information asset classification?