Isaca CISM Quiz 302 Topic 6 Questions 1506-1510

Question: 1

Which of the following would BEST enable an information security manager to provide monthly status on the

health of the information security environment to senior management?

AKey performance indicators (KPIs)

BKey risk indicators (KRIs)

CInternal audits

DKey control assessments

Show Answer

Question: 2

The MOST useful technique for maintaining management support for the information security program is:

Aidentifying the risks and consequences of failure to comply with standards.

Bbenchmarking the security programs of comparable organizations.

Cimplementing a comprehensive security awareness and training program.

Dinforming management about the security of business operations.

Show Answer

Question: 3

The PRIMARY reason for using metrics as part of an information security program is to help management:

Adetermine whether objectives are being met.

Bdevelop an information security baseline.

Cvisualize security trends.

Dtrack financial impact of the program.

Show Answer

Question: 4

When implementing information security in system development projects, which of the following is the MOST

effective approach for an information security manager with limited resources?

AReviewing security requirements prior to development

BPresenting security requirements during project planning

CEmbedding a representative in business projects

DAssigning resources based on the business impact

Show Answer

Question: 5

The MAIN purpose of incorporating social media monitoring into the information security program is to:

Agauge public opinion of the company.

Bassess employee adherence to policy.

Cdetect potential information disclosure.

Didentify disgruntled employees.

Show Answer

Isaca CISM Quiz:302 Topic:6 Questions:1506-1510