ExamGecko
Question list
Search
Search

Question 412 - CISM discussion

Report
Export

Which of the following MUST be established to maintain an effective information security governance framework?

A.
Security controls automation
Answers
A.
Security controls automation
B.
Defined security metrics
Answers
B.
Defined security metrics
C.
Change management processes
Answers
C.
Change management processes
D.
Security policy provisions
Answers
D.
Security policy provisions
Suggested answer: D

Explanation:

Security policy provisions are the statements or rules that define the information security objectives, principles, roles and responsibilities, and requirements for the organization. Security policy provisions must be established to maintain an effective information security governance framework, as they provide the foundation and direction for the information security activities and processes within the organization. Security policy provisions also help to align the information security governance framework with the business strategy and objectives, and ensure compliance with relevant laws and regulations. The other options, such as security controls automation, defined security metrics, or change management processes, are important components of an information security governance framework, but they are not essential to establish it.

Reference:

https://www.iso.org/standard/74046.html

https://www.nistf.gov/cyberframework

https://www.iso.org/standard/27001

asked 01/10/2024
chanon witchajutakul
28 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first