CISM Exam Prep UPDATED Exam Questions and CORRECT Answers
0 view 0 purchase
Course
CISM
Institution
CISM
CISM Exam Prep UPDATED Exam
Questions and CORRECT Answers
Information security governance is primarily driven by: - CORRECT ANSWER- Business
strategy
Who should drive the risk analysis for an organization? - CORRECT ANSWER- the Security
Manager
Who should be responsible for enforcing acces...
CISM Exam Prep UPDATED Exam
Questions and CORRECT Answers
Information security governance is primarily driven by: - CORRECT ANSWER- Business
strategy
Who should drive the risk analysis for an organization? - CORRECT ANSWER- the Security
Manager
Who should be responsible for enforcing access rights to application data? - CORRECT
ANSWER- Security administrators
The MOST important component of a privacy policy is: - CORRECT ANSWER-
notifications
Investment in security technology and processes should be based on: - CORRECT
ANSWER- clear alignment with the goals and objectives of the organization
Define information security governance - CORRECT ANSWER- 1. A set of policies and
procedures that establishes a framework of information security strategies
2. A practice area that ensures efficient utilization of information resources
The main purpose of information security governance - CORRECT ANSWER- to ensure the
safety of information including its Confidentiality, Integrity and Availability. Information
security governance protects information from loss, misuse, unauthorized usage, and
destruction during its life cycle or the time it is being used in an organization.
Benefits of information security governance - CORRECT ANSWER- - accountability for
protecting information during important business activities
- reduction of the impact of security incidents
- reduction in risks to tolerable limits
- protection from civil and legal liabilities
- enhancement of trust in customer relationships
, - assurance of policy compliance
- protection of company reputation
In order to be effective, information security governance needs to provide 6 basic outcomes: -
CORRECT ANSWER- - strategic alignment
- value delivery
- risk management
- performance measurement
- resource management
- integration
Should information security investments be optimized or minimized? - CORRECT
ANSWER- Optimized so that they support business objectives.
Primary goals of resource management: - CORRECT ANSWER- - keeping a record of
security practices and processes
- acquiring knowledge and making it accessible
- building a security architecture that identifies and uses infrastructure resources properly
What is Corporate Governance? - CORRECT ANSWER- Corporate governance is a set of
procedures and duties performed by the board of directors and executive management to
direct and control the organization. Corporate governance helps the board of directors to
• ensure that business objectives are met
• provide strategic direction for business activities
• verify the efficient use of the organization's resources, and
ensure proper handling of business risks
Information Security Governance - CORRECT ANSWER- While corporate governance deals
with performance and control at all levels of the organization, information security
governance is a subset of corporate governance. Information security governance is
concerned with the policies and controls related to protecting information in the organization.
It helps you to
• ensure that information security objectives are achieved
• provide strategic direction for information security activities
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller MGRADES. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $7.99. You're not tied to anything after your purchase.
