Isaca CISM Practice Test - Questions Answers, Page 53

A recent audit found that an organization's new user accounts are not set up uniformly. Which of the following is MOST important for the information security manager to review?

Which of the following is the BEST course of action when confidential information is inadvertently disseminated outside the organization?

Management would like to understand the risk associated with engaging an Infrastructure-as-a-Service (laaS) provider compared to hosting internally. Which of the following would provide the BEST method of comparing risk scenarios?

A PRIMARY benefit of adopting an information security framework is that it provides:

Which of the following should be the GREATEST concern for an information security manager when an annual audit reveals the organization's business continuity plan (BCP) has not been reviewed or updated in more than a year?

Which of the following is the MOST appropriate metric to demonstrate the effectiveness of information security controls to senior management?

An organization provides notebook PCs, cable wire locks, smartphone access, and virtual private network (VPN) access to its remote employees. Which of the following is MOST important for the information security manager to ensure?

The business value of an information asset is derived from:

Which of the following is the MOST important function of an information security steering committee?