Isaca CISM Exam - Topic 5 Question 19 Discussion

Actual exam question for Isaca's CISM exam

Question #: 19
Topic #: 5

[All CISM Questions]

What should an information security manager do FIRST after a number of security gaps have been identified that need to be resolved?

ADevelop and implement incident response strategies.

BConsolidate overlapping controls.

CPerform a cost-benefit analysis.

DPrioritize responses based on likelihood and impact.

Show Suggested Answer

Suggested Answer: D

by Audra at May 08, 2022, 12:10 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Terrilyn

4 months ago

Wait, how can you prioritize without a full assessment first?

upvoted 0 times

...

Caitlin

4 months ago

Consolidating controls seems like a good start too.

upvoted 0 times

...

Giovanna

4 months ago

But shouldn't we first develop incident response strategies?

upvoted 0 times

...

Wenona

4 months ago

Definitely agree with that, D is the way to go.

upvoted 0 times

...

Janae

5 months ago

I think prioritizing responses is key!

upvoted 0 times

...

Elvis

5 months ago

I feel like performing a cost-benefit analysis is crucial, but it might not be the very first action. Prioritizing seems more immediate to me.

upvoted 0 times

...

Wynell

5 months ago

I'm not entirely sure, but I remember something about consolidating overlapping controls being important for efficiency. Maybe that could be a first step?

upvoted 0 times

...

Melvin

5 months ago

I think the first step should be to prioritize responses based on likelihood and impact. It makes sense to tackle the most critical gaps first.

upvoted 0 times

...

Omer

5 months ago

I practiced a similar question, and I think developing incident response strategies might come later. We need to assess the situation first, right?

upvoted 0 times

...

Jody

5 months ago

Okay, let's see. I remember that region is one of the elements, so I'm going to eliminate options A and D. I think I'll go with option C.

upvoted 0 times

...

Charisse

5 months ago

I'm pretty sure it's underlining, but I'll double-check the notes just to be sure.

upvoted 0 times

...

Kristeen

5 months ago

Ah, I see. Using the @future annotation will allow the calculation to run asynchronously, which is important for a large data set like this.

upvoted 0 times

...

Mattie

5 months ago

Okay, I remember learning about EFS in class. It's a feature that allows you to encrypt and decrypt information stored in a folder, so I'll select option C.

upvoted 0 times

...