A Gap Analysis best demonstrates the added value of an Information Security Program by identifying the differences between the current state of an organization's security posture and the desired target state. It assesses where the existing security controls, policies, and practices fall short against industry standards, regulatory requirements, or best practices. The outcome of a gap analysis provides a clear roadmap for improvements, investments, and strategic planning to strengthen an organization's cybersecurity posture.
BEST demonstrates the added value of an information security program
upvoted 3 times
...
This section is not available anymore. Please use the main Exam Page.CISM Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
yottabyte
10 months, 1 week agoKa2021ka
10 months, 2 weeks agorichck102
1 year, 7 months ago