CISM Exam Question 231

What should the information security manager do FIRST when end users express that new security controls are too restrictive?
  • CISM Exam Question 232

    Which of the following is the MAIN objective of classifying a security incident as soon as it is discovered?
  • CISM Exam Question 233

    An information security manager is advised by contacts in law enforcement that there is evidence that his/ her company is being targeted by a skilled gang of hackers known to use a variety of techniques, including social engineering and network penetration. The FIRST step that the security manager should take is to:
  • CISM Exam Question 234

    Which of the following situations would MOST inhibit the effective implementation of security governance:
  • CISM Exam Question 235

    An information security manager has discovered an external break-in to the corporate network Which of the following actions should be taken FIRST?