Re-evaluating the organization's business expectations and objectives is not the responsibility of information security, but only business unit leadership. (So, not D)
The business owners are best positioned to identify program components that are hindering or not aligning with business objectives. (So, not C)
To develop or modify the security program needs evaluation of current and desired states; The best starting point for this is to interview the business unit managers and key stakeholders. (therefore, B)
Why not C? It is talking about updating security program and the info sec manager cannot review and update the business objective, that has to come from higher / senior management
C and D is more relevant here. To Identify gap i.e. program components that do not align with business expectation and objectives, first need to re-evaluate current business expectations and objectives. Hence D is correct.
If you're updating the program, it is best to reevaluate what the business goals are. This will eventually lead you to B and I know some people may have a tendency to gravitate to B before D
You need to make sure that the buniess expectations and objectives are still correct that is why D is the answer. If those items have changed then the interview can be reflected to match the situation. If not then it could have stayed the same. But without doing that analysis you won't know how to properly construct the interview questions in a way that is relevant to the goal at hand.
B falls under D. As a CISM think broad big picture. Reevaluating will lead you to conducting B.
upvoted 4 times
...
...
This section is not available anymore. Please use the main Exam Page.CISM Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
CISSPST
1 year, 1 month agoxcjxcj
10 months, 3 weeks agoddharia94
1 year, 6 months agorichck102
1 year, 6 months agokaranvp
1 year, 7 months agoSeasondream
1 year, 9 months agocosmo4ng
1 year, 9 months agodark_3k03r
1 year, 9 months agoSeasondream
1 year, 9 months ago