MENU
An organization has selected an internationally recognized information security framework. Which of the following should be the
PRIMARY basis for prioritizing the creation of related policies?
Suggested Answer: D
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
ED
Eden
11 months ago
I disagree, regulatory requirements are non-negotiable.
LE
Leslee
12 months ago
Surprised budget isn't the top priority here!
IR
Irma
12 months ago
Steering committee recommendations? Seems a bit subjective.
XO
Xochitl
12 months ago
I think correlation to business strategy is key too.
JO
Jose
1 year ago
Definitely regulatory requirements should come first!
PA
Paz
1 year ago
Steering committee recommendations could be influential, but I wonder if they should really take precedence over regulatory needs.
NI
Nikita
1 year ago
I practiced a similar question where budgetary constraints were mentioned, but I feel like they shouldn't be the top priority.
IR
Irma
1 year ago
I'm not entirely sure, but I remember something about aligning policies with business strategy being important.
WI
Winifred
1 year ago
I think regulatory requirements might be the primary basis since compliance is often critical for organizations.
CA
Catalina
1 year ago
I'm a bit confused by this question. I'll have to review my notes on the 5S program to make sure I understand the best approach.
BL
Blair
1 year ago
I think internal rate of return is the way to go on this one. It takes into account the time value of money, which is key for evaluating project economics.
SE
Sena
1 year ago
I remember practicing a similar question, and I think response prompts definitely have to do with increasing the likelihood of behaviors.