1.2 Align Security Program with Organizational Governance ISSMP Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security team wants to implement a new security information and event management (SIEM) system. The CIO is supportive, but the CFO is concerned about the ongoing licensing and maintenance costs. The team has a limited budget and must choose between a SIEM and additional endpoint protection. Which approach would most effectively secure the CFO's support for the SIEM?

   • AArgue that the SIEM is more important than endpoint protection, so the budget should be reallocated
   • BPresent a cost-benefit analysis showing how the SIEM reduces the risk of a costly breach
   • CPropose a phased implementation that starts with a pilot to demonstrate value before committing to full licensing
   • DAsk the CIO to override the CFO's concerns and approve the budget
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A security manager needs to obtain approval for a new security policy that affects all employees. Which governance body is most appropriate to engage?

   • AThe help desk
   • BThe external audit firm
   • CThe network operations team
   • DThe executive steering committee
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a legitimate source of authorization for security actions?

   • AExecutive directives
   • BPersonal judgment of the security analyst
   • CInformal conversations with colleagues
   • DVendor marketing materials
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is planning to implement a new security awareness program that includes phishing simulations. The HR director is concerned that the simulations could be seen as entrapment and damage employee morale. What is the most effective way to address the HR director's concerns?

   • AAssure the HR director that the simulations are standard industry practice
   • BCancel the phishing simulations and use only classroom training
   • CProceed with the simulations and address any morale issues after they arise
   • DCollaborate with HR to design the program with clear communication and positive reinforcement
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security team needs to implement a new data loss prevention (DLP) solution that will monitor all outbound email. The company has a works council that must be consulted on employee monitoring per local labor law. Which governance body should the security team engage to ensure compliance?

   • AThe works council, as required by local labor law
   • BThe board of directors, to approve the budget
   • CThe legal department, to review the DLP policy
   • DThe IT department, to ensure technical feasibility
   Reveal Solution Discussion Select an answer first