ExamGecko
Question list
Search
Search

Question 530 - CISM discussion

Report
Export

Which of the following is the MOST important function of an information security steering committee?

A.
Assigning data classifications to organizational assets
Answers
A.
Assigning data classifications to organizational assets
B.
Developing organizational risk assessment processes
Answers
B.
Developing organizational risk assessment processes
C.
Obtaining multiple perspectives from the business
Answers
C.
Obtaining multiple perspectives from the business
D.
Defining security standards for logical access controls
Answers
D.
Defining security standards for logical access controls
Suggested answer: C

Explanation:

An information security steering committee is a group of senior executives and managers from different business units and functions who provide strategic direction, oversight, and support for the information security program. The most important function of the committee is to obtain multiple perspectives from the business, as this helps to ensure that the information security program aligns with the business goals, needs, and culture, and that the security decisions reflect the interests and expectations of the stakeholders.

Reference= CISM Review Manual 2022, page 331; CISM Exam Content Outline, Domain 1, Knowledge Statement 1.22; Improve Security Governance With a Security Steering Committee2; The Role of the Corporate Information Security Steering Committee3

asked 01/10/2024
Pilocz Pi
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first