Discuss Isaca CISM Exam Topic 6 Question 85

Which of the following is MOST important to have in place for an organization's information security program to be effective?

ADocumented information security processes

BA comprehensive IT strategy

CSenior management support

DDefined and allocated budget

Suggested Answer: C

Senior management support is the most important factor to have in place for an organization's information security program to be effective because it helps to establish the vision, direction, and goals of the program, as well as to allocate the necessary resources and authority to implement and maintain it. Senior management support also helps to foster a security culture within the organization, where security is seen as a shared responsibility and a business enabler. Senior management support also helps to ensure compliance with internal and external security policies and standards, as well as to communicate the value and impact of security to stakeholders. Therefore, senior management support is the correct answer.

https://www.isaca.org/resources/isaca-journal/issues/2020/volume-6/key-performance-indicators-for-security-governance-part-1

https://www.ffiec.gov/press/PDF/FFIEC_IT_Handbook_Information_Security_Booklet.pdf

https://www.cdse.edu/Portals/124/Documents/student-guides/IF011-guide.pdf?ver=UA7IDZRN_y066rLB8oAW_w%3d%3d

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

36 comments · newest first

Cora 10 months ago

I’m surprised that some people overlook management support!

Susy 11 months ago

Wait, can you really have effective security without a budget?

Naomi 11 months ago

Documented processes are a must, no doubt!

Janet 11 months ago

I think a comprehensive IT strategy is key.

Dorsey 11 months ago

Definitely need senior management support!

Micah 12 months ago

I’m a bit confused about this one. I thought having a defined budget was essential, but now I'm wondering if management support outweighs that.

Jesusita 12 months ago

I'm leaning towards a comprehensive IT strategy, but I recall some discussions where budget allocation was also highlighted as a critical factor.

Selene 12 months ago

I feel like documented information security processes might be the key here. We did a case study on how lack of documentation led to major breaches.

Jesse 1 year ago

I think senior management support is crucial, but I'm not entirely sure if it's the most important. I remember a practice question that emphasized leadership's role.

Dahlia 1 year ago

I'm a bit torn between the options. A comprehensive IT strategy and defined budget are also important, but I'd say senior management support is the foundation for everything else.

Chauncey 1 year ago

Documented information security processes are key. You need a clear framework and guidelines in place to ensure consistency and accountability.

Glory 1 year ago

Senior management support seems like the most critical factor to me. Without buy-in from the top, it'll be really hard to implement the necessary security processes and controls.

Desire 1 year ago

This is a tricky one. I think I'll need to carefully consider the options and how they relate to an effective information security program.

Viola 1 year ago

Hmm, I'm a bit unsure about this one. I know collaborative filtering is used for recommendations, but I'm not sure if that's the exact technique used by Digg. Maybe I should review my notes on the different recommendation approaches before answering.

Kanisha 2 years ago

B) A comprehensive IT strategy? Sounds like a recipe for a tech-savvy paperweight. Give me C) any day.

Brice 2 years ago

↳ replying to Kanisha

D) Defined and allocated budget is necessary to implement security measures.

Keva 2 years ago

↳ replying to Kanisha

A) Documented information security processes are essential for a strong foundation.

Vallie 2 years ago

↳ replying to Kanisha

C) Senior management support is crucial for ensuring information security.

Audra 2 years ago

Senior management support? More like senior management siesta. C) is the way to go, for sure.

Beckie 2 years ago

Hmm, tough choice, but I'm going with A) Documented information security processes. That's the foundation, you know.

Tammara 2 years ago

↳ replying to Beckie

User3: Senior management support is also key though, they need to prioritize security.

Lisha 2 years ago

↳ replying to Beckie

User1: True, but without clear processes, it's hard to implement any security measures effectively.

Oren 2 years ago

↳ replying to Beckie

User2: Definitely, it sets the groundwork for a strong security program.

Weldon 2 years ago

↳ replying to Beckie

Without clear processes, it's hard to ensure consistent security measures.

Hildegarde 2 years ago

↳ replying to Beckie

Definitely, it sets the groundwork for a strong security program.

Lashon 2 years ago

↳ replying to Beckie

I agree, having documented information security processes is crucial.

Alesia 2 years ago

↳ replying to Beckie

I agree, having documented information security processes is crucial.

Leah 2 years ago

I believe having a defined and allocated budget is crucial for implementing security measures effectively.

Kanisha 2 years ago

I agree with Christene, without senior management support, it's hard to implement any security measures.

Elly 2 years ago

I'll have to go with D) Defined and allocated budget. You can't do much without the right funding.

Twanna 2 years ago

C) Senior management support is definitely the most important. Without that, the whole program is doomed to fail.

Lauran 2 years ago

↳ replying to Twanna

D) Defined and allocated budget

Darrin 2 years ago

↳ replying to Twanna

C) Senior management support

Veda 2 years ago

↳ replying to Twanna

B) A comprehensive IT strategy

Susy 2 years ago

↳ replying to Twanna

A) Documented information security processes

Christene 2 years ago

I think senior management support is the most important.

Isaca CISM Exam - Topic 6 Question 85 Discussion