ExamGecko
Question list
Search
Search

Question 365 - CISM discussion

Report
Export

The MOST important information for influencing management's support of information security is:

A.
an demonstration of alignment with the business strategy.
Answers
A.
an demonstration of alignment with the business strategy.
B.
An identification of the overall threat landscape.
Answers
B.
An identification of the overall threat landscape.
C.
A report of a successful attack on a competitor.
Answers
C.
A report of a successful attack on a competitor.
D.
An identification of organizational risks.
Answers
D.
An identification of organizational risks.
Suggested answer: A

Explanation:

The most important information for influencing management's support of information security is an demonstration of alignment with the business strategy because it shows how information security contributes to the achievement of the organization's goals and objectives, and adds value to the organization's performance and competitiveness. An identification of the overall threat landscape is not very important because it does not indicate how information security addresses or mitigates the threats or risks. A report of a successful attack on a competitor is not very important because it does not indicate how information security prevents or responds to such attacks. An identification of organizational risks is not very important because it does not indicate how information security manages or reduces the risks.

Reference: https://www.isaca.org/resources/isaca-journal/issues/2016/volume-4/technical-security-standards-for-information-systems https://www.isaca.org/resources/isaca-journal/issues/2017/volume-2/how-to-align-security-initiatives-with-business-goals-and-objectives

asked 01/10/2024
monet washington
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first