CISM Exam Question 311

Which of the following roles should be PRIMARILY responsible for assigning sensitivity levels to an organization's financial and payroll databases?
  • CISM Exam Question 312

    The MOST effective approach to address issues that arise between IT management, business units and security management when implementing a new security strategy is for the information security manager to:
  • CISM Exam Question 313

    The MOST important reason for conducting periodic risk assessments is because:
  • CISM Exam Question 314

    Management has announced the acquisition of a new company. The information security manager of parent company is concerned that conflicting access rights may cause critical information to be exposed during the integration of the two companies.
    To BEST address this concern, the information security manager should:
  • CISM Exam Question 315

    An information security manager has noticed a large number of security policy exceptions have been approved by business unit leaders. Which of the following would be the BEST course of action to address this situation?