CISM Dumps Question No 3

Question No 3:

Which of the following BEST describes information security governance?

A. Legal requirement for information security
B. Technical countermeasures used to manage security risk
C. Role of the information security manager
D. Process of measuring and managing security outcomes

Answer: D

CISM Dumps Question No 2

Question No 2:

The PRIMARY objectives of information security governance is to:

A. Ensure that policies and procedures are followed
B. Give the security manager the required authority for implementation
C. Assure regulators that security is being addressed by the company
D. Give assurance to the board that security is being managed adequately

Answer: D

CISM Dumps Question No 1

Question No 1:

The primary advantage of implementing a decentralized information security management organization within a large multinational enterprise is that it:

A. Reduces the number of security incidents that each team member is assigned
B. Requires fewer security staff members at the corporate headquarters
C. Allows language and culture to flow up into corporate security policies
D. Allows for easier administration across the enterprise

Answer: C