ExamGecko
Question list
Search
Search

Question 77 - CISM discussion

Report
Export

Which of the following is the PRIMARY reason to perform regular reviews of the cybersecurity threat landscape?

A.
To compare emerging trends with the existing organizational security posture
Answers
A.
To compare emerging trends with the existing organizational security posture
B.
To communicate worst-case scenarios to senior management
Answers
B.
To communicate worst-case scenarios to senior management
C.
To train information security professionals to mitigate new threats
Answers
C.
To train information security professionals to mitigate new threats
D.
To determine opportunities for expanding organizational information security
Answers
D.
To determine opportunities for expanding organizational information security
Suggested answer: A

Explanation:

The primary reason to perform regular reviews of the cybersecurity threat landscape is to compare emerging trends with the existing organizational security posture, as this helps the information security manager to identify and prioritize the gaps and risks that need to be addressed. The cybersecurity threat landscape is dynamic and constantly evolving, and the organization's security posture may not be adequate or aligned with the current and future threats.By reviewing the threat landscape regularly, the information security manager can assess the effectiveness and maturity of the security program, and recommend appropriate actions and controls to improve the security posture and reduce the likelihood and impact of cyberattacks.Reference= CISM Review Manual 2023, page 831; CISM Review Questions, Answers & Explanations Manual 2023, page 322; ISACA CISM - iSecPrep, page 173

asked 01/10/2024
Rio Ordonez
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first