Discuss Isaca CISM Exam Topic 7 Question 38

Which of the following is the BEST indication that information security is integrated into corporate governance?

ANew vulnerably are reported directly to the security manager.

BSignificant incidents are escalated to executive management.

CAdministrative staff is trained on current information security topics.

DSecurity policy documents are reviewed periodically.

Suggested Answer: B

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Aliza 11 months ago

D is crucial for keeping policies up to date, though.

Yuonne 12 months ago

Surprised that people think B is the best. What about ongoing training?

Dexter 12 months ago

A is important too, but it’s more about reporting than governance.

Tran 12 months ago

Totally agree with B! It shows real accountability.

Bernardine 1 year ago

I think B is the best choice. Execs need to know about big issues.

Barbra 1 year ago

I remember discussing how communication with management is crucial in our studies. So, I think B is likely the best choice, but I wonder if A could also imply some level of integration.

Oneida 1 year ago

I feel like option D could also be a strong contender since regular reviews of security policies suggest ongoing governance. But I’m leaning towards B still.

Aileen 1 year ago

I'm not entirely sure, but I remember a practice question where training was emphasized. Option C could be important too, but I feel like it’s not the best indicator of integration.

Talia 1 year ago

I think option B makes the most sense because if significant incidents are escalated to executive management, it shows that security is taken seriously at the top level.

Haydee 1 year ago

Hmm, I'm a bit unsure about this one. I know it has to do with communication, but I'm not sure which of these options is the best answer.

Oretha 1 year ago

Semantic elements, for sure. These tags help convey the purpose and organization of the content on the page.

Chandra 1 year ago

I'm a bit confused on this one. Is the router just for managing connections within a local network, or does it also handle traffic between different networks? I'll have to review my notes to be sure.

Deeanna 1 year ago

This seems like a tricky question, but I think I can figure it out. Let me break down the key details and see if I can identify the type of alternative funding method.

Arlette 1 year ago

Hmm, the key seems to be finding a way to more evenly explore the learning rate range, since the best result was at the lower end. I'm leaning towards option B, running multiple HPO jobs with different ranges.

Isaca CISM Exam - Topic 7 Question 38 Discussion