Isaca CISM Exam - Topic 6 Question 85 Discussion

Actual exam question for Isaca's CISM exam

Question #: 85
Topic #: 6

Which of the following is MOST important to have in place for an organization's information security program to be effective?

ADocumented information security processes

BA comprehensive IT strategy

CSenior management support

DDefined and allocated budget

Show Suggested Answer

Suggested Answer: C

Senior management support is the most important factor to have in place for an organization's information security program to be effective because it helps to establish the vision, direction, and goals of the program, as well as to allocate the necessary resources and authority to implement and maintain it. Senior management support also helps to foster a security culture within the organization, where security is seen as a shared responsibility and a business enabler. Senior management support also helps to ensure compliance with internal and external security policies and standards, as well as to communicate the value and impact of security to stakeholders. Therefore, senior management support is the correct answer.

https://www.isaca.org/resources/isaca-journal/issues/2020/volume-6/key-performance-indicators-for-security-governance-part-1

https://www.ffiec.gov/press/PDF/FFIEC_IT_Handbook_Information_Security_Booklet.pdf

https://www.cdse.edu/Portals/124/Documents/student-guides/IF011-guide.pdf?ver=UA7IDZRN_y066rLB8oAW_w%3d%3d

by Sheron at Sep 18, 2024, 03:58 PM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cora

6 months ago

I’m surprised that some people overlook management support!

upvoted 0 times

...

Susy

6 months ago

Wait, can you really have effective security without a budget?

upvoted 0 times

...

Naomi

6 months ago

Documented processes are a must, no doubt!

upvoted 0 times

...

Janet

7 months ago

I think a comprehensive IT strategy is key.

upvoted 0 times

...

Dorsey

7 months ago

Definitely need senior management support!

upvoted 0 times

...

Micah

7 months ago

I’m a bit confused about this one. I thought having a defined budget was essential, but now I'm wondering if management support outweighs that.

upvoted 0 times

...

Jesusita

7 months ago

I'm leaning towards a comprehensive IT strategy, but I recall some discussions where budget allocation was also highlighted as a critical factor.

upvoted 0 times

...

Selene

7 months ago

I feel like documented information security processes might be the key here. We did a case study on how lack of documentation led to major breaches.

upvoted 0 times

...

Jesse

8 months ago

I think senior management support is crucial, but I'm not entirely sure if it's the most important. I remember a practice question that emphasized leadership's role.

upvoted 0 times

...

Dahlia

8 months ago

I'm a bit torn between the options. A comprehensive IT strategy and defined budget are also important, but I'd say senior management support is the foundation for everything else.

upvoted 0 times

...

Chauncey

8 months ago

Documented information security processes are key. You need a clear framework and guidelines in place to ensure consistency and accountability.

upvoted 0 times

...

Glory

8 months ago

Senior management support seems like the most critical factor to me. Without buy-in from the top, it'll be really hard to implement the necessary security processes and controls.

upvoted 0 times

...

Desire

8 months ago

This is a tricky one. I think I'll need to carefully consider the options and how they relate to an effective information security program.

upvoted 0 times

...

Viola

8 months ago

Hmm, I'm a bit unsure about this one. I know collaborative filtering is used for recommendations, but I'm not sure if that's the exact technique used by Digg. Maybe I should review my notes on the different recommendation approaches before answering.

upvoted 0 times

...

Kanisha

2 years ago

B) A comprehensive IT strategy? Sounds like a recipe for a tech-savvy paperweight. Give me C) any day.

upvoted 0 times

Brice

2 years ago

D) Defined and allocated budget is necessary to implement security measures.

upvoted 0 times

...

Keva

2 years ago

A) Documented information security processes are essential for a strong foundation.

upvoted 0 times

...

Vallie

2 years ago

C) Senior management support is crucial for ensuring information security.

upvoted 0 times

...

Audra

2 years ago

Senior management support? More like senior management siesta. C) is the way to go, for sure.

upvoted 0 times

...

Beckie

2 years ago

Hmm, tough choice, but I'm going with A) Documented information security processes. That's the foundation, you know.

upvoted 0 times

Tammara

2 years ago

User3: Senior management support is also key though, they need to prioritize security.

upvoted 0 times

...

Lisha

2 years ago

User1: True, but without clear processes, it's hard to implement any security measures effectively.

upvoted 0 times

...

Oren

2 years ago

User2: Definitely, it sets the groundwork for a strong security program.

upvoted 0 times

...

Weldon

2 years ago

Without clear processes, it's hard to ensure consistent security measures.

upvoted 0 times

...

Hildegarde

2 years ago

Definitely, it sets the groundwork for a strong security program.

upvoted 0 times

...

Lashon

2 years ago

I agree, having documented information security processes is crucial.

upvoted 0 times

...

Alesia

2 years ago

I agree, having documented information security processes is crucial.

upvoted 0 times

...

Leah

2 years ago

I believe having a defined and allocated budget is crucial for implementing security measures effectively.

upvoted 0 times

...

Kanisha

2 years ago

I agree with Christene, without senior management support, it's hard to implement any security measures.

upvoted 0 times

...

Elly

2 years ago

I'll have to go with D) Defined and allocated budget. You can't do much without the right funding.

upvoted 0 times

...

Twanna

2 years ago

C) Senior management support is definitely the most important. Without that, the whole program is doomed to fail.

upvoted 0 times

Lauran

2 years ago

D) Defined and allocated budget

upvoted 0 times

...

Darrin

2 years ago

C) Senior management support

upvoted 0 times

...

Veda

2 years ago

B) A comprehensive IT strategy

upvoted 0 times

...

Susy

2 years ago

A) Documented information security processes

upvoted 0 times

...

Christene

2 years ago

I think senior management support is the most important.

upvoted 0 times

...