Exam CISM topic 1 question 238 discussion

Actual exam question from Isaca's CISM

Question #: 238
Topic #: 1

[All CISM Questions]

It is MOST important for an information security manager to ensure that security risk assessments are performed:

A. during a root cause analysis.
B. as part of the security business case.
C. consistently throughout the enterprise.
D. in response to the threat landscape.

Show Suggested Answer

Suggested Answer: C 🗳️

by richck102 at June 3, 2023, 5:11 a.m.

Comments

Submit Cancel

Josef4CISM

8 months, 3 weeks ago

C because: If you apply different risk management frameworks, your results will not be comparable anymore. E.g., if you use a 5x5 risk matrix for calculating one risk and user another calculation approach for another risk, than the risks are hardly comparable.

upvoted 1 times

...

yottabyte

1 year, 3 months ago

Selected Answer: C

C is the apt choice here.

upvoted 1 times

...

karanvp

2 years ago

If answer is C, then Can some one explain what is the point of doing risk assessments for tsunami if the location is exist inland area (No thread landscape)

upvoted 1 times

Learner76

1 year, 6 months ago

As part of the assessment, places with no relevant risk will be treated as such.

upvoted 1 times

...

richck102

2 years, 1 month ago

Selected Answer: C

C. consistently throughout the enterprise.

upvoted 2 times

...