Eccouncil 512-50 Exam - Topic 4 Question 78 Discussion

Actual exam question for Eccouncil's 512-50 exam

Question #: 78
Topic #: 4

An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?

AInternational Organization for Standardizations -- 27004 (ISO-27004)

BPayment Card Industry Data Security Standards (PCI-DSS)

CControl Objectives for Information Technology (COBIT)

DInternational Organization for Standardizations -- 27005 (ISO-27005)

Show Suggested Answer

Suggested Answer: A

by Chauncey at Mar 05, 2026, 10:43 PM

Limited Time Offer

25%

Off

Get Premium 512-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Beckie

2 days ago

I think COBIT is more comprehensive for governance.

upvoted 0 times

...

Hubert

7 days ago

ISO-27004 is the one for measuring effectiveness!

upvoted 0 times

...

Earleen

12 days ago

Not sure if ISO-27005 is relevant here, sounds more like risk management.

upvoted 0 times

...

Stephanie

18 days ago

Wait, isn't PCI-DSS more about compliance than effectiveness?

upvoted 0 times

...

Kirk

23 days ago

I think COBIT has a broader scope though.

upvoted 0 times

...

Belen

28 days ago

Totally agree, ISO-27004 is the way to go!

upvoted 0 times

...

Rossana

1 month ago

ISO-27004 is specifically for measuring ISMS effectiveness.

upvoted 0 times

...

Marion

1 month ago

I vaguely recall that PCI-DSS is more about compliance for payment data, so it probably wouldn't help with overall ISMS efficiency.

upvoted 0 times

...

Jaime

1 month ago

I feel like ISO-27005 is more about risk management rather than measuring effectiveness, so I don't think that's the answer.

upvoted 0 times

...

Haydee

2 months ago

I remember studying COBIT for governance and management, but I'm not convinced it's the best for measuring efficiency specifically.

upvoted 0 times

...

Jesus

2 months ago

I think ISO-27004 is the right choice since it focuses on measuring the effectiveness of information security management systems, but I'm not entirely sure.

upvoted 0 times

...