Online Access Free ISACA.CISM.v2022-04-15.q999 Practice Test (Page 176)

The use of a business case to obtain funding for an information security investment is MOST effective when the business case:

A.translates information security policies and standards into business requirements.

B.realigns information security objectives to organizational strategy,

C.relates the investment to the organization's strategic plan.

D.articulates management s intent and information security directives in clear language.

Which of the following would be MOST effective in ensuring that information security is appropriately addressed in new systems?

A.Business requirements must include security objectives

B.Information security staff perform compliance reviews before production begins

C.Internal audit signs off on security prior to implementation

D.Information security staff take responsibility for the design of system security

Which of the following would help management determine the resources needed to mitigate a risk to the organization?

A.Risk analysis process

B.Business impact analysis (BIA)

C.Risk management balanced scorecard

D.Risk-based audit program

Which of the following BEST indicates the value a purchased information security solution brings to an organization?

A.Degree to which the solution matures the information security program

B.Cost savings the solution brings to the information security department

C.Costs and benefits of the solution calculated over time

D.Alignment to security threats and risks

What is the MOST appropriate change management procedure for the handling of emergency program changes?

A.Formal documentation does not need to be completed before the change

B.Business management approval must be obtained prior to the change

C.Documentation is completed with approval soon after the change

D.All changes must follow the same process

Other Version: 1897ISACA.CISM.v2024-10-14.q528; 606ISACA.CISM.v2024-07-14.q167; 726ISACA.CISM.v2024-04-24.q336; 1266ISACA.CISM.v2023-09-14.q160; 1233ISACA.CISM.v2023-09-09.q151; 1232ISACA.CISM.v2023-08-22.q180; 1009ISACA.CISM.v2023-07-28.q152; 1045ISACA.CISM.v2023-05-16.q111; 1081ISACA.CISM.v2023-05-10.q114; 1025ISACA.CISM.v2023-03-07.q88; 4399ISACA.CISM.v2022-09-16.q374; 8286ISACA.CISM.v2022-08-01.q522; 56ISACA.Ipassleader.CISM.v2022-06-09.by.josephine.1215q.pdf; 14845ISACA.CISM.v2021-10-30.q999

Latest Upload: 306ISACA.CGEIT.v2025-09-19.q537; 155Fortinet.FCP_FWF_AD-7.4.v2025-09-18.q62; 156Scrum.SAFe-Practitioner.v2025-09-18.q63; 146Workday.Workday-Prism-Analytics.v2025-09-17.q17; 131Oracle.1Z0-1055-24.v2025-09-17.q28; 129Oracle.1Z1-182.v2025-09-17.q32; 245Nutanix.NCP-US-6.5.v2025-09-16.q73; 266Oracle.1z0-071.v2025-09-16.q232; 203Oracle.1Z1-922.v2025-09-16.q125; 326CyberArk.PAM-CDE-RECERT.v2025-09-15.q100

Download PDF File