Information Security Management Program ACCISO Practice Questions (Page 5)

Questions 21–25

1. 21expert · medium

   A company's ISMP metrics show that the number of security incidents is decreasing, but the average cost per incident is increasing. The board is concerned about the rising costs. The CISO must determine the cause and adjust the program. Which analysis is most likely to identify the root cause?

   • AAnalyze incident types and severity to see if the remaining incidents are more severe or complex, requiring higher response costs.
   • BIncrease the number of metrics collected to get a more detailed view of incident costs.
   • CAssume the cost increase is due to inflation and adjust the budget accordingly.
   • DReduce the security budget to lower overall costs, since incidents are decreasing.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is an example of a security awareness activity?

   • ASending monthly phishing simulation emails to employees
   • BReviewing firewall logs for suspicious activity
   • CConducting a vulnerability scan of the network
   • DInstalling antivirus software on all endpoints
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How does an Information Security Management Program (ISMP) best align with organizational strategy?

   • ABy focusing only on regulatory compliance, ignoring business needs
   • BBy prioritizing security over all business operations
   • CBy isolating security decisions from business planning
   • DBy ensuring security objectives support and enable business goals
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a typical component of an Information Security Management Program (ISMP)?

   • AA schedule for routine hardware replacement
   • BA set of security policies, standards, and procedures
   • CA budget for marketing and advertising campaigns
   • DA list of all employees' personal contact information
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A hospital's ISMP is being reviewed after an internal audit found that several security controls are not operating effectively. The audit also noted that risk assessments are outdated. The CISO wants to implement a continuous improvement process. Which action is most appropriate?

   • AReplace the current controls with new, more advanced security technologies.
   • BDevelop a corrective action plan based on audit findings, update the risk assessment, and schedule periodic reviews.
   • CReassign the audit findings to the IT department and move on to other priorities.
   • DIncrease the frequency of security audits to catch issues earlier.
   Reveal Solution Discussion Select an answer first