ExamGecko
Question list
Search
Search

Question 519 - CISM discussion

Report
Export

Which of the following is MOST important for guiding the development and management of a comprehensive information security program?

A.
Adopting information security program management best practices
Answers
A.
Adopting information security program management best practices
B.
Implementing policies and procedures to address the information security strategy
Answers
B.
Implementing policies and procedures to address the information security strategy
C.
Aligning the organization's business objectives with IT objectives
Answers
C.
Aligning the organization's business objectives with IT objectives
D.
Establishing and maintaining an information security governance framework
Answers
D.
Establishing and maintaining an information security governance framework
Suggested answer: D

Explanation:

An information security governance framework is a set of principles, policies, standards, and processes that guide the development, implementation, and management of an effective information security program that supports the organization's objectives and strategy. The framework provides direction to meet business goals while balancing risks and controls, as it helps to align the information security activities with the business needs, priorities, and risk appetite, and to ensure that the security resources and investments are optimized and justified.

Reference= CISM Review Manual 2022, page 321; CISM Exam Content Outline, Domain 1, Knowledge Statement 1.22; CISM domain 1: Information security governanceUpdated 2022

asked 01/10/2024
franz yap
27 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first