Isaca CISM Practice Test - Questions Answers, Page 66

An organization is considering using a third party to host sensitive archived data. Which of the following is MOST important to verify before entering into the relationship?

Which of the following BEST indicates that an information security governance framework has been successfully implemented?

Which of the following is the BEST starting point for a newly hired information security manager who has been tasked with identifying and addressing network vulnerabilities?

What is the MOST important consideration when establishing metrics for reporting to the information security strategy committee?

Which of the following BEST enables the capability of an organization to sustain the delivery of products and services within acceptable time frames and at predefined capacity during a disruption?

An organization is performing due diligence when selecting a third party. Which of the following is MOST helpful to reduce the risk of unauthorized sharing of information during this process?

Which of the following is MOST important to complete during the recovery phase of an incident response process before bringing affected systems back online?

An information security manager has been asked to provide both one-year and five-year plans for the information security program. What is the PRIMARY purpose for the long-term plan?

Which of the following is MOST important for the improvement of a business continuity plan (BCP)?