Isaca CISM Quiz 300 Topic 3 Questions 1496-1500

Question: 1

Which of the following should be established FIRST when implementing an information security governance framework?

ASecurity incident management team

BSecurity policies

CSecurity awareness training program

DSecurity architecture

Show Answer

Question: 2

Which of the following is the MOST important consideration when presenting objectives and benefits of an

information security program to nontechnical stakeholders?

AUsing technical terms

BUsing measurable terms

CUsing financial metrics

DUsing business terms

Show Answer

Question: 3

Which of the following types of controls would be MOST important to implement when digitizing human resource (HR) records?

AProject management controls

BChange management controls

CSoftware development controls

DAccess management controls

Show Answer

Question: 4

What is the PRIMARY objective of triage within the incident response process?

ATimely reporting of incidents

BContainment of incidents

COptimization of resources

DDetermination of incident impact

Show Answer

Question: 5

An information security manager has recently been notified of potential security risks associated with a third-party service provider. What should be done NEXT to address this concern?

AConduct a risk analysis

BConduct a vulnerability analysis

CEscalate to the chief risk officer

DDetermine compensating controls

Show Answer

Isaca CISM Quiz:300 Topic:3 Questions:1496-1500