MENU
Which of the following is MOST useful when prioritizing information security initiatives?
Suggested Answer: B
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
HO
Hoa
11 months ago
I thought cost of noncompliance was the top priority!
HO
Hortencia
12 months ago
Penetration testing results can be misleading sometimes.
LA
Lang
12 months ago
Wait, are we really saying cost of noncompliance matters less?
WA
Wayne
12 months ago
Totally agree, senior management input is crucial too.
AR
Arlyne
1 year ago
Risk assessment results are key for prioritizing!
WH
Whitley
1 year ago
Penetration testing results seem relevant, but I wonder if they provide enough insight compared to the broader picture from risk assessments.
TA
Tarra
1 year ago
I feel like cost of noncompliance might be a strong contender, but I can't recall if it outweighs the importance of risk assessments.
AN
Anissa
1 year ago
I remember we discussed how risk assessment results are crucial for prioritizing security initiatives, but I'm not entirely sure if they are the most useful.
DO
Domingo
1 year ago
I think input from senior management is important too, especially since they can provide context on business priorities.
EL
Elouise
1 year ago
I feel pretty confident about this. I'll work through the calculations step-by-step and select the correct answer.
NI
Nidia
1 year ago
I'm not entirely sure about this one. I'll need to carefully read through the policy details and think through the logic step-by-step to make sure I get the right answer.
TA
Tammara
1 year ago
I recall something about Cisco APIC determining the roots, but I'm a bit fuzzy on whether it's automatic or manual configuration.
ST
Stacey
1 year ago
I'm not totally sure about this one. I'll try to eliminate the options that don't make sense and then make an educated guess.