ExamGecko
Question list
Search
Search

Question 648 - CISM discussion

Report
Export

Which of the following is a PRIMARY responsibility of the information security goxernance function?

A.
Administering information security awareness training
Answers
A.
Administering information security awareness training
B.
Defining security strategies to support organizational programs
Answers
B.
Defining security strategies to support organizational programs
C.
Ensuring adequate support for solutions using emerging technologies
Answers
C.
Ensuring adequate support for solutions using emerging technologies
D.
Advising senior management on optimal levels of risk appetite and tolerance
Answers
D.
Advising senior management on optimal levels of risk appetite and tolerance
Suggested answer: B

Explanation:

Defining security strategies to support organizational programs is a primary responsibility of the information security governance function, as it involves providing strategic direction for security activities and ensuring that objectives are achieved.According to ISACA, information security governance is a subset of corporate governance that provides guidance for aligning information security with business objectives, managing information security risks, and using information resources responsibly12.

Reference= CISM Review Manual, 27th Edition, Chapter 4, Section 4.1.1, page 2131; CISM Online Review Course, Module 4, Lesson 1, Topic 12

asked 01/10/2024
Paul Bryant
30 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first