Isaca CISM Quiz 166 Topic 5 Questions 826-830

Question: 1

A newly hired information security manager for a small organization has been tasked with improving data security. The BEST way to understand the organizations security postuie would be to:

Aengage a third party to perform a security assessment.

Bperform a gap analysis based on Industry best practices.

Creview previous vulnerabilities.

Didentify and classify business processes.

Show Answer

Question: 2

Which of the following is the- BEST method to determine whether an information security program meets an organization s business objectives?

AImplement performance measures.

BPerform a business impact analysis (BIA)

CReview against international security standards.

DConduct an annual enterprise-wide security evaluation.

Show Answer

Question: 3

An information security manager is implementing controls to protect the organization's dat

a. The FIRST step in this process should be to:

Aclassify the data.

Bimplement access controls.

Cmonitor access to the data.

Dencrypt the data.

Show Answer

Question: 4

A risk analysis for a new system is being performed. For which of the following is business knowledge MORE important than IT knowledge?

AVulnerability analysis

BBalanced scorecard

CCost-benefit analysis

DImpact analysis

Show Answer

Question: 5

An organization s senior management wants to allow employees to access an internal application using their personal mobile devices. Which of the following should be the information security managers FIRST course of action?

ADevelop a personal device policy

BConduct security testing

CRequire device encryption

DAssess the security risk

Show Answer

Isaca CISM Quiz:166 Topic:5 Questions:826-830