Information Governance Frameworks and Standards CISM Practice Questions (Page 5)

Questions 21–21

1. 21foundation · easy

   Which of the following best exemplifies the integration of an information governance framework with enterprise governance?

   • AThe board of directors receives regular reports on information security risks and governance metrics.
   • BThe IT department independently sets all security policies without input from other business units.
   • CInformation security risks are excluded from the enterprise risk register.
   • DSecurity decisions are made solely by external consultants.
   Reveal Solution Discussion Select an answer first