ExamGecko
Question list
Search
Search

Question 135 - CISM discussion

Report
Export

Which of the following will BEST facilitate the integration of information security governance into enterprise governance?

A.
Developing an information security policy based on risk assessments
Answers
A.
Developing an information security policy based on risk assessments
B.
Establishing an information security steering committee
Answers
B.
Establishing an information security steering committee
C.
Documenting the information security governance framework
Answers
C.
Documenting the information security governance framework
D.
Implementing an information security awareness program
Answers
D.
Implementing an information security awareness program
Suggested answer: B

Explanation:

Establishing an information security steering committee is the best way to facilitate the integration of information security governance into enterprise governance. The information security steering committee is a cross-functional group of senior managers who provide strategic direction, oversight, and support for the information security program. The committee ensures that the information security strategy is aligned with the enterprise strategy, objectives, and risk appetite. The committee also fosters collaboration and communication among various stakeholders and promotes a culture of security awareness and accountability. Developing an information security policy, documenting the information security governance framework, and implementing an information security awareness program are all important activities for implementing and maintaining information security governance, but they do not necessarily facilitate its integration into enterprise governance.These activities may be initiated or endorsed by the information security steering committee, but they are not sufficient to ensure that information security governance is embedded into the enterprise governance structure and processes.Reference= CISM Review Manual 2023, page 341; CISM Practice Quiz2

asked 01/10/2024
Miquel Triebel
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first