How does information security governance achieve strategic alignment with business objectives?

By ensuring that security initiatives are derived from and support the organization's goals

By focusing only on regulatory compliance

By isolating security decisions from business planning

By implementing the latest security technologies

How does information security governance ensure effective and efficient use of security resources?

By prioritizing security initiatives based on business risk and value

By avoiding all security investments

By hiring the maximum number of security staff

By purchasing the most expensive security products

Which practice best demonstrates strategic alignment in information security governance?

Performing regular penetration tests

Conducting security awareness training for all employees

Involving security leaders in business strategy planning sessions

Purchasing the most advanced security tools available

A startup is implementing an information security governance program for the first time. What is the first step the CISO should take?

Develop detailed security policies and standards.

Conduct a comprehensive risk assessment.

Obtain executive sponsorship and define the governance structure.

Purchase security tools and technologies.

Which component is typically part of an information security governance framework?

A backup tape rotation schedule

A set of security policies and standards

EC-CouncilAssociate C|CISO

Domain 1Objective 2

Defining an Information Security Governance Program ACCISO Practice Questions (Page 3)

Part of the Governance, Risk, and Compliance domain, which makes up ~15% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)

59questions here

12free pages

12concepts

Questions 11–15

11foundation · easy
How does information security governance achieve strategic alignment with business objectives?
Select an answer first
12foundation · easy
How does information security governance ensure effective and efficient use of security resources?
Select an answer first
13foundation · easy
Which practice best demonstrates strategic alignment in information security governance?
Select an answer first
14application · medium
A startup is implementing an information security governance program for the first time. What is the first step the CISO should take?
Select an answer first
15foundation · easy
Which component is typically part of an information security governance framework?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.