Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISM Exam - Topic 7 Question 1 Discussion

To gain a clear understanding of the impact that a new regulatory will have on an organization's security control, an information manager should FIRST.
C) Perform a gap analysis
A) Conduct a risk assessment
B) Interview senior management
D) Conduct a cost-benefit analysis

Isaca CISM Exam - Topic 7 Question 1 Discussion

Actual exam question for Isaca's CISM exam
Question #: 1
Topic #: 7
[All CISM Questions]

To gain a clear understanding of the impact that a new regulatory will have on an organization's security control, an information manager should FIRST.

Show Suggested Answer Hide Answer
Suggested Answer: C

by Vallie at May 08, 2022, 07:06 PM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Natalie
8 months ago
Totally agree with starting with a risk assessment!
upvoted 0 times
...
Lilli
9 months ago
Surprised that cost-benefit analysis is even an option here!
upvoted 0 times
...
Blondell
9 months ago
Gap analysis should come after the risk assessment, right?
upvoted 0 times
...
Brunilda
9 months ago
I think interviewing senior management is more important.
upvoted 0 times
...
Gerald
9 months ago
A risk assessment is definitely the first step!
upvoted 0 times
...
Nakisha
9 months ago
Cost-benefit analysis seems important, but I feel like we need to understand the risks before diving into costs.
upvoted 0 times
...
Sheldon
9 months ago
Gap analysis sounds familiar, but I can't recall if it should be the first action. I might be mixing it up with other processes.
upvoted 0 times
...
Clay
9 months ago
I think the first step should be conducting a risk assessment, but I'm not entirely sure if that's the best approach.
upvoted 0 times
...
Karrie
9 months ago
I remember a practice question where interviewing senior management was emphasized, but I feel like that might come after assessing the risks.
upvoted 0 times
...
Amina
9 months ago
This looks like a pretty straightforward systems integration question. I'd start by mapping out the data flows between the different systems and identifying any potential bottlenecks or areas for optimization.
upvoted 0 times
...
Sunny
9 months ago
Hmm, I'm not sure about this one. I'll have to think it through carefully.
upvoted 0 times
...
Louis
9 months ago
Hmm, I'm a bit unsure about this one. There are a few options that seem plausible, but I'm not totally confident in my understanding of how port scanners are typically defended against. I'll have to think this through carefully.
upvoted 0 times
...
Sarah
9 months ago
Okay, I've got this. The key is to identify which of these elements is not actually an input to assessing organizational readiness. I'll eliminate the options one by one.
upvoted 0 times
...
Penney
10 months ago
I'm not entirely sure about this one, but I'll give it my best shot and hope for the best.
upvoted 0 times
...

Save Cancel