ExamGecko
Question list
Search
Search

Question 525 - CISM discussion

Report
Export

A PRIMARY benefit of adopting an information security framework is that it provides:

A.
credible emerging threat intelligence.
Answers
A.
credible emerging threat intelligence.
B.
security and vulnerability reporting guidelines.
Answers
B.
security and vulnerability reporting guidelines.
C.
common exploitability indices.
Answers
C.
common exploitability indices.
D.
standardized security controls.
Answers
D.
standardized security controls.
Suggested answer: D

Explanation:

A standardized security control is a set of rules, guidelines, or best practices that are designed to protect the confidentiality, integrity, and availability of information assets and systems. An information security framework is a collection of standardized security controls that are aligned with the organization's objectives, strategy, and risk appetite. Adopting an information security framework provides a primary benefit of ensuring consistency, efficiency, and effectiveness in the implementation and management of information security across the organization.

Reference= CISM Review Manual 2022, page 321; CISM Exam Content Outline, Domain 1, Knowledge Statement 1.22;What is an Information Security Framework?;Information Security Frameworks: What Are They and Why Do You Need One?

asked 01/10/2024
Jonaid Alam
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first