IsacagCISM
CertifiedgInformationgSecuritygManager
Version:g4.0 1 / 4
IsacagCISMgExam "PassgAnygExam.gAnygTime."g- gwww.actualtests.com 2
Topicg1,gINFORMATION gSECURITYgGOVERNANCE gQUESTI
ONgNO:g1
WhichgofgthegfollowinggshouldgbegthegFIRSTgstepgingdevelopingganginformationgsecuritygplan?
- Performgagtechnicalgvulnerabilitiesgassessment
- Analyzegthegcurrentgbusinessgstrategy
- Performgagbusinessgimpactganalysis
- Assessgthegcurrentglevelsgofgsecuritygawareness
Answer:gBgExplanatio
n:
Priorgtogassessinggtechnicalgvulnerabilitiesgorglevelsgofgsecuritygawareness,ganginformationgsecurit ygmanagergneedsgtoggaingangunderstandinggofgthegcurrentgbusinessgstrategygandgdirection.gAgbusi nessgimpactganalysisgshouldgbegperformedgpriorgtogdevelopinggagbusinessgcontinuitygplan,gbutgthis gwouldgnotgbegangappropriategfirstgstepgingdevelopingganginformationgsecuritygstrategygbecausegitgf ocusesgongavailability.
QUESTION gNO:g2
SeniorgmanagementgcommitmentgandgsupportgforginformationgsecuritygcangBESTgbegobtainedgthro
ughgpresentationsgthat:
- usegillustrativegexamplesgofgsuccessfulgattacks.
- explaingthegtechnicalgrisksgtogthegorganization.
- evaluategthegorganizationgagainstgbestgsecuritygpractices.
- tiegsecuritygrisksgtogkeygbusinessgobjectives.
Answer:gDgExplanatio
n:
Seniorgmanagementgseeksgtogunderstandgthegbusinessgjustificationgforginvestinggingsecurity.gThisg cangbestgbegaccomplishedgbygtyinggsecuritygtogkeygbusinessgobjectives.gSeniorgmanagementgwillg notgbegasginterestedgingtechnicalgrisksgorgexamplesgofgsuccessfulgattacksgifgtheygaregnotgtiedgtogthe gimpactgongbusinessgenvironmentgandgobjectives.gIndustrygbestgpracticesgaregimportantgtogseniorg managementgbut,gagain,gseniorgmanagementgwillggivegthemgthegrightglevelgofgimportancegwhengthe ygaregpresentedgingtermsgofgkeygbusinessgobjectives. 2 / 4
IsacagCISMgExam
QUESTION gNO:g3
"PassgAnygExam.gAnygTime."g- gwww.actualtests.com 3
ThegMOSTgappropriategrolegforgseniorgmanagementgingsupportingginformationgsecuritygisgthe:
- evaluationgofgvendorsgofferinggsecuritygproducts.
- assessmentgofgrisksgtogthegorganization.
- approvalgofgpolicygstatementsgandgfunding.
- monitoringgadherencegtogregulatorygrequirements.
Answer:gCgExplanatio
n:
Sincegthegmembersgofgseniorgmanagementgaregultimatelygresponsiblegforginformationgsecurity,gthe ygaregthegultimategdecisiongmakersgingtermsgofggovernancegandgdirection.gTheygaregresponsiblegfo rgapprovalgofgmajorgpolicygstatementsgandgrequestsgtogfundgtheginformationgsecuritygpractice.Evaluationgofgvendors,gassessmentgofgrisksgandgmonitoringgcompliancegwithgregulatorygrequireme ntsgaregday-to- daygresponsibilitiesgofgtheginformationgsecuritygmanager;gingsomegorganizations,gbusinessgmanage mentgisginvolvedgingthesegothergactivities,gthoughgtheirgprimarygrolegisgdirectiongandggovernance.
QUESTION gNO:g4
WhichgofgthegfollowinggwouldgBESTgensuregthegsuccessgofginformationgsecurityggovernancegwithing angorganization?
- Steeringgcommitteesgapprovegsecuritygprojects
- Securitygpolicygtraininggprovidedgtogallgmanagers
- Securitygtraininggavailablegtogallgemployeesgongthegintranet
- Steeringgcommitteesgenforcegcompliancegwithglawsgandgregulations
Answer:gAgExplanatio
n:
Thegexistencegofgagsteeringgcommitteegthatgapprovesgallgsecuritygprojectsgwouldgbegangindicationg ofgthegexistencegofgaggoodggovernancegprogram.gCompliancegwithglawsgandgregulationsgisgpartgofg thegresponsibilitygofgthegsteeringgcommitteegbutgitgisgnotgagfullganswer.gAwarenessgtraininggisgimpo rtantgatgallglevelsginganygmedium,gandgalsogangindicatorgofggoodggovernance.gHowever,gitgmustgbeg guidedgandgapprovedgasgagsecuritygprojectgbygthegsteeringgcommittee. 3 / 4
IsacagCISMgExam "PassgAnygExam.gAnygTime."g- gwww.actualtests.com 4
QUESTION gNO:g5
InformationgsecurityggovernancegisgPRIMARILYgdrivengby:
- technologygconstraints.
- regulatorygrequirements.
- litigationgpotential.
- businessgstrategy.
Answer:gDgExplanatio
n:
Governancegisgdirectlygtiedgtogthegstrategygandgdirectiongofgthegbusiness.gTechnologygconstraints,g regulatorygrequirementsgandglitigationgpotentialgaregallgimportantgfactors,gbutgtheygaregnecessarilygi nglinegwithgthegbusinessgstrategy.
QUESTION gNO:g6
WhichgofgthegfollowinggrepresentsgthegMAJORgfocusgofgprivacygregulations?
- Unrestrictedgdatagmining
- Identitygtheft
- HumangrightsgprotectiongD.
- Identifiablegpersonalgdata
Answer:gDgExplanatio
n:
Protectiongofgidentifiablegpersonalgdatagisgthegmajorgfocusgofgrecentgprivacygregulationsgsuchgasgth egHealthgInsurancegPortabilitygandgAccountabilitygActg(HIPAA).gDatagmininggisgangacceptedgtoolgf orgadghocgreporting;gitgcouldgposegagthreatgtogprivacygonlygifgitgviolatesgregulator)'gprovisions.gIdent itygtheftgisgagpotentialgconsequencegofgprivacygviolationsgbutgnotgthegmaingfocusgofgmanygregulatio ns.gHumangrightsgaddressesgprivacygissuesgbutgisgnotgthegmaingfocusgofgregulations.
QUESTION gNO:g7
Investmentsginginformationgsecuritygtechnologiesgshouldgbegbasedgon:
- vulnerabilitygassessments.
- / 4