MENU
A common misconception about Enterprise Security Risk Management (ESRM) is that it is the same as Enterprise Risk Management (ERM). which covers all risk for the business. What is the other misconception?
Suggested Answer: B
Get Premium ASIS-CPP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
BA
Bambi
1 month ago
I lean towards option D too. Leadership is key in ESRM.
GE
Gerri
1 month ago
Exactly, it's about integrating various security aspects.
MA
Mary
1 month ago
I agree! It's more than just a program; it's a whole framework.
LA
Lashawnda
2 months ago
I feel like they underestimate how complex ESRM really is.
GE
Geraldo
2 months ago
Yeah, many people confuse ESRM with just IT security.
KR
Kristel
2 months ago
I think the misconception is about the convergence of IT and physical security.
VI
Vicky
2 months ago
D is definitely a misconception, it's more complex than that!
TA
Tarra
2 months ago
Wait, are we sure about that? Sounds off.
SU
Sunshine
2 months ago
Isn't ESRM just about IT security?
TE
Tennie
3 months ago
Totally agree, they are not the same!
JA
Jamal
3 months ago
I thought ESRM was just a part of ERM.
MI
Micaela
3 months ago
I feel like the misconception might relate to how security programs are structured, maybe something about sub-programs? That sounds familiar.
GL
Glendora
3 months ago
If I remember correctly, ESRM is more about integrating security into the overall risk management framework, but I'm uncertain about the options listed here.
OL
Olene
3 months ago
I think I came across a similar question about the differences between ESRM and ERM, but I can't recall the exact details.
RH
Rhea
4 months ago
I remember studying that ESRM focuses specifically on security risks, but I'm not sure what the other misconception could be.