CISM Practice Test

CISM Practice Test practice questions, page 44 of 50, with answer review and explanations.

Question 216

In addition to executive sponsorship and business alignment, which of the following is MOST critical for information security governance?

  1. Ownership of security
  2. Auditability of systems
  3. Allocation of training resources
  4. Compliance with policies

Question 217

Which of the following is a PRIMARY responsibility of the information security governance function?

  1. Administering information security awareness training
  2. Advising senior management on optimal levels of risk appetite and tolerance
  3. Defining security strategies to support organizational programs
  4. Ensuring adequate support for solutions using emerging technologies

Question 218

Which of the following is MOST important to the successful implementation of an information security program?

  1. Key performance indicators (KPIs) are defined.
  2. Adequate security resources are allocated to the program.
  3. A balanced scorecard is approved by the steering committee.
  4. The program is developed using global security standards.

Question 219

To address the issue that performance pressures on IT may conflict with information security controls, it is MOST important that:

  1. the steering committee provides guidance and dispute resolution.
  2. the security policy is changed to accommodate IT performance pressure.
  3. IT policies and procedures are better aligned to security policies.
  4. noncompliance issues are reported to senior management.

Question 220

Information security awareness programs are MOST effective when they are:

  1. sponsored by senior management.
  2. reinforced by computer-based training.
  3. customized for each target audience.
  4. conducted at employee orientation.