Isaca CISM Quiz 113 Topic 3 Questions 561-565

Question: 1

When preparing a business case for the implementation of a security information and event management (SIEM) system, which of the following should be a PRIMARY driver in the feasibility study?

ACost of software

BCost-benefit analysis

CImplementation timeframe

DIndustry benchmarks

Show Answer

Question: 2

Which is MOST important to enable a timely response to a security breach?

AKnowledge sharing and collaboration

BSecurity event logging

CRoles and responsibilities

DForensic analysis

Show Answer

Question: 3

After an information security business case has been approved by senior management, it should be:

Aused to design functional requirements for the solution

Bused as the foundation for a risk assessment

Creferenced to build architectural blueprints for the solution

Dreviewed at key intervals to ensure intended outcomes.

Show Answer

Question: 4

Which of the following is the PRIMARY responsibility of the information security steering committee?

ADeveloping security policies aligned with the corporate and IT strategies

BReviewing business cases where benefits have not been realized

CIdentifying risks associated with new security initiatives

DDeveloping and presenting business cases for security initiatives

Show Answer

Question: 5

A multinational organization wants to ensure its privacy program appropriately addresses privacy risk throughout its operations. Which of the following would be of MOST concern to senior management?

AThe organization uses a decentralized privacy governance structure

BPrivacy policies ire only reviewed annually

CThe organization doe* not have a dedicated privacy officer

DThe privacy program does not include a formal warning component

Show Answer

Isaca CISM Quiz:113 Topic:3 Questions:561-565