CISM Exam Question 36

An information security manager learns that IT personnel are not adhering to the information security policy because it creates process inefficiencies. What should the information security manager do FIRST?
  • CISM Exam Question 37

    When collecting admissible evidence, which of the following is the MOST important requirement?
  • CISM Exam Question 38

    Which of the following BEST enables an organization to provide ongoing assurance that legal and regulatory compliance requirements can be met?
  • CISM Exam Question 39

    Which of the following activities MUST be performed by an information security manager for change requests?
  • CISM Exam Question 40

    An organization is close to going live with the implementation of a cloud-based application. Independent penetration test results have been received that show a high-rated vulnerability. Which of the following would be the BEST way to proceed?