ExamGecko
Question list
Search
Search

Question 352 - CISM discussion

Report
Export

Which of the following is MOST important to include in an information security status report management?

A.
List of recent security events
Answers
A.
List of recent security events
B.
Key risk indication (KRIs)
Answers
B.
Key risk indication (KRIs)
C.
Review of information security policies
Answers
C.
Review of information security policies
D.
information security budget requests
Answers
D.
information security budget requests
Suggested answer: B

Explanation:

Key risk indicators (KRIs) are the most useful to include in an information security status report for management because they measure and report the level of risk exposure or performance against predefined risk thresholds or targets, and alert management of any deviations or issues that may require attention or action. List of recent security events is not very useful to include in an information security status report for management because it does not provide any analysis or evaluation of the events or their impact on the organization's objectives or performance. Review of information security policies is not very useful to include in an information security status report for management because it does not reflect any progress or results of implementing or enforcing the policies. Information security budget requests are not very useful to include in an information security status report for management because they do not indicate any value or benefit of investing in information security initiatives or controls.

Reference: https://www.isaca.org/resources/isaca-journal/issues/2016/volume-6/how-to-measure-the-effectiveness-of-information-security-using-iso-27004

asked 01/10/2024
Jaap van Veldhuizen
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first