Exam CISM topic 1 question 995 discussion

Actual exam question from Isaca's CISM

Question #: 995
Topic #: 1

When selecting metrics to monitor the effectiveness of an information security program, it is MOST important for an information security manager to:

A. identify the program's risk and compensating controls.
B. consider the organization's business strategy.
C. consider the strategic objectives of the program.
D. leverage industry benchmarks.

Show Suggested Answer

Suggested Answer: C 🗳️

by oluchecpoint at Oct. 1, 2023, 7:02 a.m.

Comments

Submit Cancel

Cyberbug2021

Highly Voted 1 year, 7 months ago

Selected Answer: C

While the organization's business strategy should influence the overall security posture, it doesn't directly determine the specific metrics that measure the program's effectiveness.

upvoted 8 times

...

ServerBrain

Most Recent 8 months, 2 weeks ago

Selected Answer: C

To evaluate or measure the program, align the metrics to the program..

upvoted 1 times

...

jcisco123

1 year, 5 months ago

Selected Answer: B

B. consider the organization's business strategy.

upvoted 1 times

...

richck102

1 year, 8 months ago

Selected Answer: C

C. consider the strategic objectives of the program.

upvoted 3 times

...

oluchecpoint

1 year, 9 months ago

Selected Answer: B

Business strategies should have priority to program goals

upvoted 4 times

AlexJacobson

1 year, 5 months ago

But it shouldn't dictate the metrics to monitor them.

upvoted 1 times

...