Discuss Isaca CISM Exam Topic 1 Question 113

Which of the following should be the PRIMARY objective of an information security governance framework?

AProvide a baseline for optimizing the security profile of the organization.

BDemonstrate senior management commitment.

CDemonstrate compliance with industry best practices to external stakeholders.

DEnsure that users comply with the organization's information security policies.

Suggested Answer: A

According to the Certified Information Security Manager (CISM) Study Manual, 'The primary objective of information security governance is to provide a framework for managing and controlling information security practices and technologies at an enterprise level. Its goal is to manage and reduce risk through a process of identification, assessment, and management of those risks.'

While demonstrating senior management commitment, compliance with industry best practices, and ensuring user compliance with policies are all important aspects of information security governance, they are not the primary objective. The primary objective is to manage and reduce risk by establishing a framework for managing and controlling information security practices and technologies at an enterprise level.

Certified Information Security Manager (CISM) Study Manual, 15th Edition, Page 60.

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

Mirta 23 days ago

D ensures everyone is on the same page, though.

Jenelle 28 days ago

C helps in building a good reputation externally.

Veronique 1 month ago

B can boost morale and accountability among staff.

Shonda 1 month ago

A provides a solid foundation for everything else.

Troy 1 month ago

D is vital, but it feels more like a secondary goal.

Gertude 2 months ago

C is important for trust with stakeholders.

Renay 2 months ago

I agree, but B shows management's commitment too.

Jerrod 2 months ago

I think A is the best choice. Optimizing security is crucial.

Laurel 2 months ago

Wait, are we sure A is the best choice?

Princess 2 months ago

D is crucial, but not the primary focus.

Aretha 2 months ago

C seems like a priority too, right?

Vince 3 months ago

I think B is just as important.

Deonna 3 months ago

A is definitely the main goal!

Van 3 months ago

I feel like ensuring user compliance is crucial, but it might not be the main goal of the governance framework.

Ines 3 months ago

Compliance with industry best practices seems important, but I wonder if it’s really the primary focus.

Alyssa 3 months ago

I remember a practice question that emphasized optimizing the security profile, so I’m leaning towards option A.

Kayleigh 4 months ago

I think the primary objective might be to demonstrate senior management commitment, but I'm not entirely sure.

Isaca CISM Exam - Topic 1 Question 113 Discussion