In security governance, which stakeholder is typically responsible for ensuring the organization complies with employment laws and manages personnel-related risks?

The chief information security officer (CISO)

Which of the following is the most appropriate first step when a security initiative requires approval from a governance body?

Identify the correct governance body and its approval process

Implement the initiative immediately and inform the board later

Post the initiative on the company intranet for employee vote

Ask the IT help desk to approve the initiative

A global company is restructuring and creating a new 'Digital Business Unit' that will operate with significant autonomy, including its own IT and security team. The corporate security team is concerned that this unit may not follow corporate security policies. What is the most effective governance approach to ensure alignment?

Mandate that the new unit adopt all corporate policies without exception

Require the new unit to report directly to the corporate CISO for all security matters

Allow the new unit to develop its own security policies without corporate oversight

Establish a security steering committee with representation from both corporate and the new unit to oversee policy alignment

What is the primary purpose of defining boundaries of delegated authority in a security program?

To eliminate the need for policies

To allow security personnel to act without any oversight

To expand the authority of security personnel beyond legal limits

To ensure security actions stay within the scope of what is permitted

Information Systems Security Management Professional

Domain 1Objective 2

1.2 Align Security Program with Organizational Governance ISSMP Practice Questions (Page 1)

Part of the Leadership and Organizational Management domain, which accounts for 21% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 2–3 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

8concepts

21%of the exam

Questions 1–5

1foundation · easy
In security governance, which stakeholder is typically responsible for ensuring the organization complies with employment laws and manages personnel-related risks?
Select an answer first
2foundation · easy
Which of the following is the most appropriate first step when a security initiative requires approval from a governance body?
Select an answer first
3foundation · easy
Which stakeholder is primarily responsible for providing legal advice on regulatory requirements and contractual obligations related to security?
Select an answer first
4expert · hard
A global company is restructuring and creating a new 'Digital Business Unit' that will operate with significant autonomy, including its own IT and security team. The corporate security team is concerned that this unit may not follow corporate security policies. What is the most effective governance approach to ensure alignment?
Select an answer first
5foundation · easy
What is the primary purpose of defining boundaries of delegated authority in a security program?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

1.2 Align Security Program with Organizational Governance ISSMP Practice Questions (Page 1)

Questions 1–5

In security governance, which stakeholder is typically responsible for ensuring the organization complies with employment laws and manages personnel-related risks?

Which of the following is the most appropriate first step when a security initiative requires approval from a governance body?

Which stakeholder is primarily responsible for providing legal advice on regulatory requirements and contractual obligations related to security?

What is the primary purpose of defining boundaries of delegated authority in a security program?

Keep studying — Leadership and Organizational Management