CISM Exam Question 66

Which of the following metrics BEST measures the effectiveness of an organization's information security program?
  • CISM Exam Question 67

    A post-incident review identified that user error resulted in a major breach. Which of the following is MOST important to determine during the review?
  • CISM Exam Question 68

    What is the PRIMARY benefit to an organization when information security program requirements are aligned with employment and staffing processes?
  • CISM Exam Question 69

    In a business proposal, a potential vendor promotes being certified for international security standards as a measure of its security capability.
    Before relying on this certification, it is MOST important that the information security manager confirms that the:
  • CISM Exam Question 70

    Which of the following would BEST help to ensure appropriate security controls are built into software?