Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISM Exam - Topic 5 Question 19 Discussion

What should an information security manager do FIRST after a number of security gaps have been identified that need to be resolved?
D) Prioritize responses based on likelihood and impact.
A) Develop and implement incident response strategies.
B) Consolidate overlapping controls.
C) Perform a cost-benefit analysis.

Isaca CISM Exam - Topic 5 Question 19 Discussion

Actual exam question for Isaca's CISM exam
Question #: 19
Topic #: 5
[All CISM Questions]

What should an information security manager do FIRST after a number of security gaps have been identified that need to be resolved?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Audra at May 08, 2022, 12:10 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Terrilyn
8 months ago
Wait, how can you prioritize without a full assessment first?
upvoted 0 times
...
Caitlin
9 months ago
Consolidating controls seems like a good start too.
upvoted 0 times
...
Giovanna
9 months ago
But shouldn't we first develop incident response strategies?
upvoted 0 times
...
Wenona
9 months ago
Definitely agree with that, D is the way to go.
upvoted 0 times
...
Janae
9 months ago
I think prioritizing responses is key!
upvoted 0 times
...
Elvis
9 months ago
I feel like performing a cost-benefit analysis is crucial, but it might not be the very first action. Prioritizing seems more immediate to me.
upvoted 0 times
...
Wynell
9 months ago
I'm not entirely sure, but I remember something about consolidating overlapping controls being important for efficiency. Maybe that could be a first step?
upvoted 0 times
...
Melvin
9 months ago
I think the first step should be to prioritize responses based on likelihood and impact. It makes sense to tackle the most critical gaps first.
upvoted 0 times
...
Omer
9 months ago
I practiced a similar question, and I think developing incident response strategies might come later. We need to assess the situation first, right?
upvoted 0 times
...
Jody
9 months ago
Okay, let's see. I remember that region is one of the elements, so I'm going to eliminate options A and D. I think I'll go with option C.
upvoted 0 times
...
Charisse
9 months ago
I'm pretty sure it's underlining, but I'll double-check the notes just to be sure.
upvoted 0 times
...
Kristeen
9 months ago
Ah, I see. Using the @future annotation will allow the calculation to run asynchronously, which is important for a large data set like this.
upvoted 0 times
...
Mattie
10 months ago
Okay, I remember learning about EFS in class. It's a feature that allows you to encrypt and decrypt information stored in a folder, so I'll select option C.
upvoted 0 times
...

Save Cancel