ISACA CISM (Certified Information Security Manager) - 340 Questions

1. A newly appointed CISO is tasked with developing an information security strategy for a large financial institution. Which of the following should be the FIRST step in this process?

2. An information security manager is presenting the value of the information security program to the board of directors. Which metric would BEST demonstrate the program's alignment with business objectives?

3. A company's information security governance framework needs to be aligned with corporate governance. Which of the following BEST describes this relationship?

4. An organization is establishing an information security steering committee. Who should serve as the committee CHAIR to ensure proper governance?

5. When developing an information security strategy, which framework BEST helps align information security governance with enterprise governance and business goals?