ExamGecko
Question list
Search
Search

Question 400 - CISM discussion

Report
Export

Which of the following would provide the BEST evidence to senior management that security control performance has improved?

A.
Demonstrated return on security investment
Answers
A.
Demonstrated return on security investment
B.
Reduction in inherent risk
Answers
B.
Reduction in inherent risk
C.
Results of an emerging threat analysis
Answers
C.
Results of an emerging threat analysis
D.
Review of security metrics trends
Answers
D.
Review of security metrics trends
Suggested answer: D

Explanation:

Review of security metrics trends is the best evidence to senior management that security control performance has improved because it helps to measure and demonstrate the effectiveness and efficiency of the security controls over time. Security metrics are quantitative or qualitative indicators that provide information about the security status or performance of an organization, system, process, or activity. Security metrics can be used to evaluate the implementation, operation, and outcome of security controls, such as the number of vulnerabilities detected and remediated, the time to respond and recover from incidents, the compliance level with security policies and standards, or the return on security investment. Review of security metrics trends helps to identify and communicate the progress, achievements, and challenges of the security program, as well as to support decision making and continuous improvement. Therefore, review of security metrics trends is the correct answer.

https://www.bitsight.com/blog/importance-continuous-improvement-security-performance-management

https://www.isaca.org/resources/isaca-journal/issues/2020/volume-6/key-performance-indicators-for-security-governance-part-2

https://www.nist.gov/news-events/news/2021/09/dhs-nist-coordinate-releasing-preliminary-cybersecurity-performance-goals.

asked 01/10/2024
laurence peterson
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first