Quiz CISM

Quiz CISM, Certified Information Security Manager

A risk management program would be expected to:

Which of the following risks is represented in the risk appetite of an organization?

A security risk assessment exercise should be repeated at regular intervals because:

The MOST likely reason they made this decision is that:

When performing a quantitative risk analysis, which of the following is MOST important to estimate the potential loss?

It is important to classify and determine relative sensitivity of assets to ensure that:

Data owners are PRIMARILY responsible for establishing risk mitigation methods to address which of the following areas?

A successful risk management program should lead to:

which of the following situations presents the GREATEST information security risk for an organization with multiple…?

Identification and prioritization of business risk enables project managers to: