What is the primary purpose of creating an information asset inventory?

To reduce the amount of data stored by the organization

To identify and document all information assets to enable proper protection and management

To comply with all data protection regulations

To assign a monetary value to every asset for insurance purposes

What is a key benefit of adopting a recognized security framework?

It guarantees that all security incidents will be prevented

It automatically ensures compliance with all regulations

It eliminates the need for internal security policies

It provides a common language and structure for managing security risks

A law firm is classifying its client files. The managing partner wants to ensure that client confidentiality is protected, but also wants to avoid unnecessary controls on non-sensitive administrative documents. The CISO must implement a classification scheme that is practical for the firm's size and culture. Which approach is most appropriate?

Use a complex five-level scheme with detailed criteria for every possible data type.

Classify all documents as Confidential by default and require declassification requests.

Allow each lawyer to classify their own documents using their personal judgment without formal criteria.

Implement a simple three-level scheme (Public, Internal, Confidential) with clear examples and criteria for each level.

Which of the following is an example of a 'tool' resource in an information security program?

Intrusion detection system (IDS)

Certified Information Security Manager

Domain 3Objective 1

Program Foundation and Governance CISM Practice Questions (Page 4)

Part of the Domain 3: Information Security Program domain, which accounts for 33% of the CISM exam.

32questions here

7free pages

9concepts

33%of the exam

Questions 16–20

16foundation · easy
Which of the following is a widely recognized international standard for information security management systems (ISMS)?
Select an answer first
17foundation · easy
What is the primary purpose of creating an information asset inventory?
Select an answer first
18foundation · easy
What is a key benefit of adopting a recognized security framework?
Select an answer first
19application · medium
A law firm is classifying its client files. The managing partner wants to ensure that client confidentiality is protected, but also wants to avoid unnecessary controls on non-sensitive administrative documents. The CISO must implement a classification scheme that is practical for the firm's size and culture. Which approach is most appropriate?
Select an answer first
20foundation · easy
Which of the following is an example of a 'tool' resource in an information security program?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISM

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISM” is a trademark of its owner, used for identification only.

Program Foundation and Governance CISM Practice Questions (Page 4)

Questions 16–20

Which of the following is a widely recognized international standard for information security management systems (ISMS)?

What is the primary purpose of creating an information asset inventory?

What is a key benefit of adopting a recognized security framework?

Which of the following is an example of a 'tool' resource in an information security program?

Keep studying — Domain 3: Information Security Program