Information Security Strategy Development CISM Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   How does integrating the security strategy into governance processes benefit the organization?

   • AIt guarantees that all security risks are eliminated
   • BIt ensures security is considered in organizational decision-making
   • CIt removes the need for security awareness training
   • DIt eliminates the need for security audits
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary purpose of a gap assessment in the strategy development process?

   • ATo determine the exact number of security staff required for daily operations
   • BTo compare the organization's security budget with that of industry peers
   • CTo list all security vulnerabilities found in the latest penetration test
   • DTo identify the differences between the current security state and the desired target state
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which of the following is a key benefit of effective stakeholder communication in security strategy?

   • AGuaranteed approval of the security budget
   • BIncreased stakeholder support and alignment
   • CReduced need for security monitoring
   • DElimination of all security risks
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A healthcare organization is developing a new security strategy. The CISO needs to understand the organization's current security posture before defining strategic initiatives. The organization has recently experienced several phishing incidents and has outdated patch management processes. Which approach best assesses the current state?

   • AReviewing incident reports, control assessments, and audit findings to document existing capabilities and weaknesses.
   • BBenchmarking against a competitor's published security budget.
   • CImplementing a new endpoint detection and response tool immediately.
   • DAsking the board to define the acceptable level of risk for the next fiscal year.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which of the following BEST demonstrates strategic alignment of the information security strategy?

   • AThe security strategy is developed solely by the security team without input from business units
   • BThe security strategy is designed to achieve the lowest possible security budget
   • CThe security strategy focuses exclusively on the latest security technologies
   • DThe security strategy prioritizes initiatives that protect the organization's most critical business processes
   Reveal Solution Discussion Select an answer first