Exam CISM topic 1 question 389 discussion

Actual exam question from Isaca's CISM

Question #: 389
Topic #: 1

[All CISM Questions]

To help ensure that an information security training program is MOST effective, its contents should be:

A. aligned to business processes.
B. based on employees' roles.
C. based on recent incidents.
D. focused on information security policy.

Show Suggested Answer

Suggested Answer: B 🗳️

by Broesweelies at Feb. 7, 2023, 8:50 a.m.

Comments

Submit Cancel

nezeranonymous

3 weeks, 6 days ago

Selected Answer: B

B is the answer. Training program not IS program is the question.

upvoted 1 times

...

xcjxcj

9 months, 3 weeks ago

Selected Answer: A

A. aligned to business processes

upvoted 3 times

...

richck102

1 year, 5 months ago

B. based on employees' roles.

upvoted 2 times

...

The most effective information security training program would be based on employees' roles. This means that the contents of the training should be tailored to each employee's specific job responsibilities and the information security risks associated with those responsibilities. This approach ensures that each employee understands their specific obligations regarding information security and how their actions can impact the security of sensitive information.

upvoted 3 times

...