Discuss Isaca CISM Exam Topic 5 Question 73

Which of the following BEST enables an organization to effectively manage emerging cyber risk?

APeriodic internal and external audits

BClear lines of responsibility

CSufficient cyber budget allocation

DCybersecurity policies

Suggested Answer: D

The most effective course of action when employees are using free cloud storage services to store company data through their mobile devices is to assess the business need to provide a secure solution, such as a corporate-approved cloud service or a virtual desktop environment. Assessing the business need can help understand why employees are using free cloud storage services, what kind of data they are storing, and what are the security risks and requirements. Based on the assessment, the security manager can propose a secure solution that meets the business needs and complies with the BYOD policy. The other options, such as allowing the practice to continue, disabling remote access, or initiating remote wipe, may not address the underlying business need or may cause disruption or data loss. Reference:

https://www.digitalguardian.com/blog/byod-security-expert-tips-policy-mitigating-risks-preventing-breach

https://news.microsoft.com/en-xm/2021/03/18/how-to-have-secure-remote-working-with-a-byod-policy/

https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/-infosec-guide-bring-your-own-device-byod

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

34 comments · newest first

Annelle 10 months ago

Wait, are audits really that effective?

Sherly 11 months ago

A solid budget is crucial too!

Kati 11 months ago

Cybersecurity policies are a must-have!

Lorrine 11 months ago

I’m not so sure about that. What about audits?

Mari 11 months ago

Clear lines of responsibility are key!

Caprice 12 months ago

Cybersecurity policies seem fundamental, but I wonder if they are enough on their own without the other factors in place.

Wynell 12 months ago

I feel like having a sufficient budget is necessary, but I can't recall if it directly correlates with managing emerging risks effectively.

Michael 12 months ago

I remember a practice question that emphasized clear lines of responsibility; it seems crucial for accountability in cybersecurity.

Charisse 1 year ago

I think periodic audits are important, but I'm not sure if they are the best option for managing emerging risks.

Tammara 1 year ago

I'm feeling a bit unsure about this question. I'll need to weigh the pros and cons of each option to make the right choice.

Lai 1 year ago

Okay, I've got this. Periodic audits, clear responsibilities, sufficient budget, and cybersecurity policies - I think option D is the best answer here.

Christiane 1 year ago

Hmm, I'm not entirely sure about this. I'll need to review my notes on cyber risk management to decide.

Tracey 1 year ago

This is a tricky one. I'll need to think through the options carefully to determine the best approach.

Stephania 1 year ago

Hmm, I'm a bit unsure about the differences between Administration Server and Managed Server. Let me think this through carefully.

Harley 1 year ago

Okay, I see what's going on here. Service A is using its private key to encrypt the message digest, which Service B can then decrypt with the public key. This proves the message came from Service A and wasn't altered in transit. I'm confident I can select the right answer.

Artie 1 year ago

I'm pretty sure this is punishment. When an employee gets demoted, it's a direct negative consequence for poor performance.

Ma 1 year ago

Definitely going with the cybersecurity policies option. That's the foundation for everything else - setting the rules of the road for managing cyber risks.

Elise 1 year ago

↳ replying to Ma

True, everyone needs to know their role in protecting against cyber attacks.

Isaiah 1 year ago

↳ replying to Ma

Having clear lines of responsibility is also important to ensure accountability.

Kandis 1 year ago

↳ replying to Ma

I agree, they provide the guidelines for how to handle potential threats.

Bobbie 1 year ago

↳ replying to Ma

Cybersecurity policies are definitely crucial for managing cyber risks.

Glynda 1 year ago

Ha! Cybersecurity on a budget, that's a joke. But you know what they say, an ounce of prevention is worth a pound of 'I told you so'.

Dorothy 1 year ago

I agree, a holistic approach with policies, budget, and clear roles is needed. This question is testing our understanding of a comprehensive cybersecurity strategy.

Micheal 1 year ago

↳ replying to Dorothy

C) Sufficient cyber budget allocation

Sherill 1 year ago

↳ replying to Dorothy

B) Clear lines of responsibility

Vincenza 1 year ago

↳ replying to Dorothy

A) Periodic internal and external audits

Sharen 1 year ago

Budget allocation is important, but without defined responsibilities, it's like throwing money at a problem without a plan.

Sabra 1 year ago

↳ replying to Sharen

C) Sufficient cyber budget allocation

Quiana 1 year ago

↳ replying to Sharen

B) Clear lines of responsibility

Tammara 1 year ago

↳ replying to Sharen

A) Periodic internal and external audits

Caitlin 1 year ago

Periodic audits are a good start, but I think a clear cybersecurity policy is key to effectively managing emerging risks.

Kyoko 2 years ago

I believe periodic internal and external audits are also important to manage cyber risk effectively.

Dana 2 years ago

I agree with Huey, having clear lines of responsibility ensures accountability.

Huey 2 years ago

I think clear lines of responsibility are crucial for managing cyber risk.

Isaca CISM Exam - Topic 5 Question 73 Discussion