CA Foundation Business Economics Questions 2023 - Part 32
Fri, 03 Mar 2023
Inspirational journeys
Follow the stories of academics and their research expeditions
CISM—Certified Information Security Manager - Part 32
1. Which of the following is the MOST important reason for an organization to develop an information security governance program?
A) Establishment of accountability
B) Compliance with audit requirements
C) Monitoring of security incidents
D) Creation of tactical solutions
2. The PRIMARY purpose of aligning information security with corporate governance objectives is to:
A) build capabilities to improve security processes.
B) consistently manage significant areas of risk.
C) identify an organization's tolerance for risk.
D) re-align roles and responsibilities.
3. Which of the following is the MOST important consideration for designing an effective information security governance framework?
A) Defined metrics
B) Continuous audit cycle
C) Security policy provisions
D) Security controls automation
4. The PRIMARY goal of information security governance to an organization is to:
A) align with business processes
B) align with business objectives
C) establish a security strategy
D) manage security costs
5. Which of the following is the BEST way to integrate information security into corporate governance?
A) Engage external security consultants in security initiatives.
B) Conduct comprehensive information security management training for key stakeholders.
C) Ensure information security processes are part of the existing management processes.
D) Require periodic security risk assessments be performed.
A) Establishment of accountability
B) Compliance with audit requirements
C) Monitoring of security incidents
D) Creation of tactical solutions
2. The PRIMARY purpose of aligning information security with corporate governance objectives is to:
A) build capabilities to improve security processes.
B) consistently manage significant areas of risk.
C) identify an organization's tolerance for risk.
D) re-align roles and responsibilities.
3. Which of the following is the MOST important consideration for designing an effective information security governance framework?
A) Defined metrics
B) Continuous audit cycle
C) Security policy provisions
D) Security controls automation
4. The PRIMARY goal of information security governance to an organization is to:
A) align with business processes
B) align with business objectives
C) establish a security strategy
D) manage security costs
5. Which of the following is the BEST way to integrate information security into corporate governance?
A) Engage external security consultants in security initiatives.
B) Conduct comprehensive information security management training for key stakeholders.
C) Ensure information security processes are part of the existing management processes.
D) Require periodic security risk assessments be performed.
1. Right Answer: B
Explanation:
2. Right Answer: A
Explanation:
3. Right Answer: A
Explanation:
4. Right Answer: B
Explanation:
5. Right Answer: C
Explanation:
Explanation:
2. Right Answer: A
Explanation:
3. Right Answer: A
Explanation:
4. Right Answer: B
Explanation:
5. Right Answer: C
Explanation:
Tags:
it certification certified it it exams isaca certification isaca cgeit isaca cisa isaca cism isaca cobit 5 isaca crisc isaca questions practice exams pratice quests risc maangement it management it questions isaca answers isaca practice isaca dumps isaca test test questions questins and answer explanation0 Comments
Categories
Recent posts
CA Foundation Business Economics Questions 2023 - Part 31
Fri, 03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 30
Fri, 03 Mar 2023
Leave a comment