Isaca CISM Quiz 320 Topic 4 Questions 1596-1600

Question: 1

Which of the following would BEST ensure that security risk assessment is integrated into the life cycle of major IT projects?

AHaving the Information security manager participate on the project steering committees

BApplying global security standards to the IT projects

CIntegrating the risk assessment into the internal audit program

DTraining project managers on risk assessment

Show Answer

Question: 2

An organization has remediated a security flaw in a system. Which of the following should be done NEXT?

AUpdate the system's documentation

BAllocate budget for penetration testing

CShare lessons learned with the organization

DAssess the residual risk.

Show Answer

Question: 3

Which of the7ager to regularly report to senior management?

AResults of penetration tests

BImpact of untreated risks

CThreat analysis reports

DAudit reports

Show Answer

Question: 4

A. facilitating stakeholder undemanding ol program-related technology concepts

BDesigning universal key performance indicators (KPIs) for the program

CUnderstanding stakeholder needs that influence program objectives

DDocumenting risk that could impact achievement of program objectives

Show Answer

Question: 5

Senior management has just accepted the risk of noncompliance with a new regulation. What should the information security manager do NEXT7

AAssess the impact of the regulation.

BReassess the organization's risk tolerance.

CUpdate details within the disk register

DReport the decision to the compliance officer.

Show Answer

Isaca CISM Quiz:320 Topic:4 Questions:1596-1600