A multinational corporation is updating its information security governance program. The CISO wants to ensure that business objectives are considered when setting security priorities. Which stakeholder group should the CISO engage to achieve this?

Executive leadership and business unit managers

In the context of information security, which activity is an example of management rather than governance?

Establishing the overall security strategy

Defining the organization's risk appetite

Approving the annual information security budget

Conducting daily vulnerability scans on network devices

A manufacturing company is implementing an information security governance program. The CISO has developed the framework and policies, but the board has not yet approved them. The CISO is under pressure to start implementing controls. What is the best course of action?

Implement controls immediately and seek approval later

Implement only the controls that do not require additional budget

Seek board approval of the framework and policies before implementing controls

Wait for the next fiscal year to seek approval

EC-CouncilAssociate C|CISO

Domain 1Objective 2

Defining an Information Security Governance Program ACCISO Practice Questions (Page 10)

Part of the Governance, Risk, and Compliance domain, which makes up ~15% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)

59questions here

12free pages

12concepts

Questions 46–50

46foundation · easy
Which of the following is an example of a supporting document in an information security governance program?
Select an answer first
47application · medium
A multinational corporation is updating its information security governance program. The CISO wants to ensure that business objectives are considered when setting security priorities. Which stakeholder group should the CISO engage to achieve this?
Select an answer first
48foundation · easy
Which document is typically part of an information security governance program?
Select an answer first
49foundation · easy
In the context of information security, which activity is an example of management rather than governance?
Select an answer first
50expert · hard
A manufacturing company is implementing an information security governance program. The CISO has developed the framework and policies, but the board has not yet approved them. The CISO is under pressure to start implementing controls. What is the best course of action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.

Defining an Information Security Governance Program ACCISO Practice Questions (Page 10)

Questions 46–50

Which of the following is an example of a supporting document in an information security governance program?

A multinational corporation is updating its information security governance program. The CISO wants to ensure that business objectives are considered when setting security priorities. Which stakeholder group should the CISO engage to achieve this?

Which document is typically part of an information security governance program?

In the context of information security, which activity is an example of management rather than governance?

A manufacturing company is implementing an information security governance program. The CISO has developed the framework and policies, but the board has not yet approved them. The CISO is under pressure to start implementing controls. What is the best course of action?

Keep studying — Governance, Risk, and Compliance