MENU
What should an information security manager do FIRST after a number of security gaps have been identified that need to be resolved?
Suggested Answer: D
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
TE
Terrilyn
11 months ago
Wait, how can you prioritize without a full assessment first?
CA
Caitlin
12 months ago
Consolidating controls seems like a good start too.
GI
Giovanna
12 months ago
But shouldn't we first develop incident response strategies?
WE
Wenona
12 months ago
Definitely agree with that, D is the way to go.
JA
Janae
1 year ago
I think prioritizing responses is key!
EL
Elvis
1 year ago
I feel like performing a cost-benefit analysis is crucial, but it might not be the very first action. Prioritizing seems more immediate to me.
WY
Wynell
1 year ago
I'm not entirely sure, but I remember something about consolidating overlapping controls being important for efficiency. Maybe that could be a first step?
ME
Melvin
1 year ago
I think the first step should be to prioritize responses based on likelihood and impact. It makes sense to tackle the most critical gaps first.
OM
Omer
1 year ago
I practiced a similar question, and I think developing incident response strategies might come later. We need to assess the situation first, right?
JO
Jody
1 year ago
Okay, let's see. I remember that region is one of the elements, so I'm going to eliminate options A and D. I think I'll go with option C.
CH
Charisse
1 year ago
I'm pretty sure it's underlining, but I'll double-check the notes just to be sure.
KR
Kristeen
1 year ago
Ah, I see. Using the @future annotation will allow the calculation to run asynchronously, which is important for a large data set like this.
MA
Mattie
1 year ago
Okay, I remember learning about EFS in class. It's a feature that allows you to encrypt and decrypt information stored in a folder, so I'll select option C.