Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISM Exam - Topic 7 Question 30 Discussion

Which of the following is the BEST evidence of the maturity of an organization's information security program?
C) Management has approved the information security policy.
A) IT security staff implements strict technical security controls.
B) The number of reported incidents has increased
D) The number of reported incidents has decreased

Isaca CISM Exam - Topic 7 Question 30 Discussion

Actual exam question for Isaca's CISM exam
Question #: 30
Topic #: 7
[All CISM Questions]

Which of the following is the BEST evidence of the maturity of an organization's information security program?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Ammie at May 05, 2022, 08:01 PM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Brande
8 months ago
Agreed, fewer incidents definitely indicates improvement!
upvoted 0 times
...
Naomi
9 months ago
Wait, how can more incidents mean better security? That seems off.
upvoted 0 times
...
Hyun
9 months ago
Management approval of policies is key for a mature program.
upvoted 0 times
...
Reuben
9 months ago
I think a decrease in incidents shows real progress!
upvoted 0 times
...
Ludivina
9 months ago
Strict controls are important, but not the only sign of maturity.
upvoted 0 times
...
Willodean
9 months ago
I recall that an increase in reported incidents could mean better detection, but it doesn't seem like a sign of maturity. I think I lean towards option D being the best evidence.
upvoted 0 times
...
Sherell
9 months ago
I feel like strict technical controls are necessary, but they don't necessarily reflect the overall maturity of the program. I’m a bit confused about this one.
upvoted 0 times
...
Reena
9 months ago
I think I came across a similar question where they emphasized management's role in approving policies. It might be important, but is it the best indicator?
upvoted 0 times
...
Billye
9 months ago
I remember studying that a decrease in reported incidents usually indicates a mature security program, but I'm not entirely sure if that's the best evidence.
upvoted 0 times
...
Stephanie
9 months ago
I think I'll go with option D - creating a roll-up summary field. That seems like the most straightforward way to display the number of open cases related to the account.
upvoted 0 times
...
Melissia
9 months ago
This seems straightforward enough. I'll carefully consider each transaction and apply my knowledge of the OFAC regulations to determine the correct answer.
upvoted 0 times
...
Gwenn
10 months ago
Okay, I think I've got this. The PE router is the provider edge router, so it should connect to at least one other PE router, not a CE (customer edge) device. I'll go with option C.
upvoted 0 times
...

Save Cancel