CISM Exam Question 306

The organization has decided to outsource the majority of the IT department with a vendor that is hosting servers in a foreign country. Of the following, which is the MOST critical security consideration?
  • CISM Exam Question 307

    An information security manager that is utilizing a public cloud is performing a root cause investigation of an incident that took place in that environment. Which of the following should be the security manager's MAIN concern?
  • CISM Exam Question 308

    An incident response team has determined there is a need to isolate a system that is communicating with a known malicious host on the Internet.
    Which of the following stakeholders should be contacted FIRST?
  • CISM Exam Question 309

    A business previously accepted the risk associated with a zero-day vulnerability The same vulnerability was recently exploited in a high-profile attack on another organization m the same Industry Which of the following should be the information security manager's FIRST course of action?
  • CISM Exam Question 310

    To justify the establishment of an incident management team, an information security manager would find which of the following to be the MOST effective?