CISM Information Security Management Practice Exam

Sample Questions

Q) Which of the following would be the first step in the development of information security plan?

a) A technical vulnerability assessment

b) Analysis of the current business strategy

c) Make a business impact analysis

d) Assess the current level of security awareness

e) None

Q) The eldest management commitment and support of information security can best be achieved through presentations:

a) using illustrative examples of successful attacks.

b) explain the technical risks of the organization.

c) to assess the organization of the best security practices.

d) the associated security key business objectives.

e) None

Q) The most appropriate role for the management of information security support are:

a) assessment of suppliers that offer security.

b) assessment of risks to the organization.

c) approval of policy statements and funding.

d) monitoring compliance with regulatory requirements.

e) None

Q) Which of the following would be the best way to ensure the success of information security management within an organization?

a) Coordinating committees approve security projects

b) Safety training is provided to all managers

c) Security training is available to all employees on the intranet

d) The steering groups to follow the laws and regulations

e) None