Discuss Isaca CISM Exam Topic 5 Question 82

Which of the following is the MOST important reason to conduct interviews as part of the business impact analysis (BIA) process?

ATo facilitate a qualitative risk assessment following the BIA

BTo increase awareness of information security among key stakeholders

CTo ensure the stakeholders providing input own the related risk

DTo obtain input from as many relevant stakeholders as possible

Suggested Answer: D

The most effective course of action when employees are using free cloud storage services to store company data through their mobile devices is to assess the business need to provide a secure solution, such as a corporate-approved cloud service or a virtual desktop environment. Assessing the business need can help understand why employees are using free cloud storage services, what kind of data they are storing, and what are the security risks and requirements. Based on the assessment, the security manager can propose a secure solution that meets the business needs and complies with the BYOD policy. The other options, such as allowing the practice to continue, disabling remote access, or initiating remote wipe, may not address the underlying business need or may cause disruption or data loss. Reference:

https://www.digitalguardian.com/blog/byod-security-expert-tips-policy-mitigating-risks-preventing-breach

https://news.microsoft.com/en-xm/2021/03/18/how-to-have-secure-remote-working-with-a-byod-policy/

https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/-infosec-guide-bring-your-own-device-byod

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

37 comments · newest first

Gracia 10 months ago

A qualitative risk assessment is important too, though.

Nicolette 11 months ago

Surprised that people overlook option B, awareness is crucial!

Elmira 11 months ago

But isn't option C more about accountability?

Derick 11 months ago

Totally agree, more input means better analysis!

Emelda 11 months ago

I think option D is key for gathering diverse insights.

Hubert 12 months ago

I practiced a similar question, and I remember that qualitative assessments are important, so option A could also be a contender.

Nobuko 12 months ago

I feel like ensuring stakeholders own the risks is key, so I might lean towards option C, but I need to think more about it.

Franklyn 12 months ago

I'm not entirely sure, but I remember something about increasing awareness being important too. Maybe option B?

Alica 1 year ago

I think option D makes sense because getting input from various stakeholders is crucial for a comprehensive BIA.

Charlene 1 year ago

I'm a bit unsure on this one. I know the interviews are important for the BIA, but I'm not sure which of these options is the most critical reason. I'll need to re-read the question and think it through.

Danilo 1 year ago

Okay, I've got this. The most important reason is to ensure the stakeholders providing input own the related risk. The interviews are about getting buy-in and accountability, not just information gathering.

Kallie 1 year ago

Hmm, this is a tricky one. I think the key is to focus on the primary objective of the BIA interviews, rather than secondary benefits. I'll need to weigh the options carefully.

Erick 1 year ago

This question seems straightforward, but I want to make sure I understand the key purpose of the BIA interviews. I'll need to carefully review the options to determine the most important reason.

Iluminada 1 year ago

Okay, let me see here. The question mentions Varnish for full page caching, so I'm guessing this attribute has something to do with how Magento interacts with Varnish. I'll need to review my knowledge of Varnish and Magento's caching strategies.

Emmanuel 1 year ago

Option A? Really? I thought this was supposed to be about the BIA, not a risk assessment. Gotta stay focused, folks!

Talia 1 year ago

↳ replying to Emmanuel

D) To obtain input from as many relevant stakeholders as possible

Callie 1 year ago

↳ replying to Emmanuel

C) To ensure the stakeholders providing input own the related risk

Dorothea 1 year ago

↳ replying to Emmanuel

A) To facilitate a qualitative risk assessment following the BIA

Nguyet 1 year ago

Haha, the correct answer is obviously C. After all, what's the point of a BIA if the stakeholders don't own the related risk?

Lea 1 year ago

↳ replying to Nguyet

I agree with you, C is definitely a key factor in conducting interviews for the BIA process.

Willie 1 year ago

↳ replying to Nguyet

I see your point, but I still believe C is the most important reason. Stakeholders owning the risk is crucial.

Margart 1 year ago

↳ replying to Nguyet

I think the correct answer is actually D. We need input from as many stakeholders as possible.

Mabel 1 year ago

I'm going with B. Increasing security awareness among key stakeholders is a great way to strengthen the overall process.

Ranee 1 year ago

↳ replying to Mabel

C) To ensure the stakeholders providing input own the related risk

Laurel 1 year ago

↳ replying to Mabel

B) To increase awareness of information security among key stakeholders

Frederick 1 year ago

↳ replying to Mabel

A) To facilitate a qualitative risk assessment following the BIA

Stephane 1 year ago

D seems like the way to go. The more input you can get from relevant stakeholders, the better your BIA will be.

Herman 1 year ago

↳ replying to Stephane

User 2: Definitely, the more perspectives we have, the better we can assess the risks and impacts.

Darrel 1 year ago

↳ replying to Stephane

User 1: I agree, getting input from as many stakeholders as possible is crucial for a comprehensive BIA.

Simona 1 year ago

But wouldn't conducting interviews also help in ensuring the stakeholders providing input own the related risk?

Dorthy 2 years ago

I agree with Isadora. It's crucial to gather diverse perspectives to ensure a comprehensive analysis.

Jacinta 2 years ago

I think option C is the most important reason. Getting stakeholder buy-in is crucial for the BIA process to be effective.

Sharen 1 year ago

↳ replying to Jacinta

Exactly, having a diverse range of perspectives can help identify potential threats and vulnerabilities.

Paris 1 year ago

↳ replying to Jacinta

Yes, that's true. It's important to have a comprehensive view of the risks involved.

Sena 1 year ago

↳ replying to Jacinta

But don't you think obtaining input from as many relevant stakeholders as possible is also important?

Tanesha 1 year ago

↳ replying to Jacinta

I agree, getting stakeholder buy-in is key for the BIA process.

Isadora 2 years ago

I think the most important reason is to obtain input from as many relevant stakeholders as possible.

Isaca CISM Exam - Topic 5 Question 82 Discussion