Study tips CISM

An information security manager must understand the relationship between information security and business operations in order to:

The MOST important characteristic of good security policies is that they:

When developing an information security program, what is the MOST useful source of information for determining available resources?

In order to highlight to management the importance of network security, the security manager should FIRST:

The MOST useful way to describe the objectives in the information security strategy is through:

To justify the need to invest in a forensic analysis tool, an information security manager should FIRST:

which of the following is one of the MOST important topics to include in the contract from a security standpoint?

An information security strategy document that includes specific links to an organization’s business activities is PRIMARILY an indicator of:

Which of the following processes is critical for deciding prioritization of actions in a business continuity plan?

To ensure that the tapes are properly maintained and usable during a system crash, the MOST appropriate measure the organization should perform is to: