Quiz CISM

Quiz CISM, Certified Information Security Manager

which of the following would FIRST govern how this information is to be protected?

What is the BEST technique to determine which security controls to implement with a limited budget?

What process should the information security manager deploy to determine the necessity for remedial action?

Which of the following measures would be MOST effective against insider threats to confidential information?

An information security manager should:

The information security manager should encourage the business to:

The criticality and sensitivity of information assets is determined on the basis of:

Which program element should be implemented FIRST in asset classification and control?

When performing a risk assessment, the MOST important consideration is that:

The MAIN reason why asset classification is important to a successful information security program is because classification determines: