ExamGecko
Question list
Search
Search

Question 252 - CISM discussion

Report
Export

Which of the following provides the BEST evidence that a recently established infofmation security program is effective?

A.
The number of reported incidents has increased
Answers
A.
The number of reported incidents has increased
B.
Regular IT balanced scorecards are communicated.
Answers
B.
Regular IT balanced scorecards are communicated.
C.
Senior management has reported fewer junk emails.
Answers
C.
Senior management has reported fewer junk emails.
D.
The number of tickets associated with IT incidents have stayed consistent
Answers
D.
The number of tickets associated with IT incidents have stayed consistent
Suggested answer: A

Explanation:

The number of reported incidents has increased is the best evidence that a recently established information security program is effective because it indicates that the organization has improved its detection and reporting capabilities and has raised awareness among employees about security issues. Regular IT balanced scorecards are communicated is not a good evidence because it does not measure the actual performance or outcomes of the security program. Senior management has reported fewer junk emails is not a good evidence because it does not reflect the overall security posture or maturity of the organization. The number of tickets associated with IT incidents have stayed consistent is not a good evidence because it does not show any improvement or reduction in security incidents or risks.

Reference: https://www.isaca.org/resources/isaca-journal/issues/2016/volume-6/how-to-measure-the-effectiveness-of-information-security-using-iso-27004 https://www.isaca.org/resources/isaca-journal/issues/2014/volume-6/how-to-measure-the-effectiveness-of-your-information-security-management-system

asked 01/10/2024
Robinson Santos
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first