ExamGecko
Question list
Search
Search

Question 467 - CISM discussion

Report
Export

An information security program is BEST positioned for success when it is closely aligned with:

A.
information security best practices.
Answers
A.
information security best practices.
B.
recognized industry frameworks.
Answers
B.
recognized industry frameworks.
C.
information security policies.
Answers
C.
information security policies.
D.
the information security strategy.
Answers
D.
the information security strategy.
Suggested answer: D

Explanation:

An information security program is best positioned for success when it is closely aligned with the information security strategy, which defines the organization's vision, mission, goals, objectives, and risk appetite for information security. The information security strategy provides the direction and guidance for developing and implementing the information security program, ensuring that it supports the organization's business processes and objectives. The information security strategy also helps to establish the scope, boundaries, roles, responsibilities, and resources for the information security program.

Reference= CISM Manual, Chapter 3: Information Security Program Development (ISPD), Section 3.1: Information Security Strategy1

1: https://store.isaca.org/s/store#/store/browse/cat/a2D4w00000Ac6NNEAZ/tiles

asked 01/10/2024
Ali Danial
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first