Isaca CISM Exam - Topic 7 Question 46 Discussion

Actual exam question for Isaca's CISM exam

Question #: 46
Topic #: 7

[All CISM Questions]

An organization has selected an internationally recognized information security framework. Which of the following should be the

PRIMARY basis for prioritizing the creation of related policies?

ABudgetary requirements to support implementation

BSteering committee recommendations

CRegulatory requirements

DCorrelation to business strategy

Show Suggested Answer

Suggested Answer: D

by Audry at May 09, 2022, 05:54 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Eden

4 months ago

I disagree, regulatory requirements are non-negotiable.

upvoted 0 times

...

Leslee

4 months ago

Surprised budget isn't the top priority here!

upvoted 0 times

...

Irma

4 months ago

Steering committee recommendations? Seems a bit subjective.

upvoted 0 times

...

Xochitl

4 months ago

I think correlation to business strategy is key too.

upvoted 0 times

...

Jose

5 months ago

Definitely regulatory requirements should come first!

upvoted 0 times

...

Paz

5 months ago

Steering committee recommendations could be influential, but I wonder if they should really take precedence over regulatory needs.

upvoted 0 times

...

Nikita

5 months ago

I practiced a similar question where budgetary constraints were mentioned, but I feel like they shouldn't be the top priority.

upvoted 0 times

...

Irma

5 months ago

I'm not entirely sure, but I remember something about aligning policies with business strategy being important.

upvoted 0 times

...

Winifred

5 months ago

I think regulatory requirements might be the primary basis since compliance is often critical for organizations.

upvoted 0 times

...

Catalina

5 months ago

I'm a bit confused by this question. I'll have to review my notes on the 5S program to make sure I understand the best approach.

upvoted 0 times

...

Blair

5 months ago

I think internal rate of return is the way to go on this one. It takes into account the time value of money, which is key for evaluating project economics.

upvoted 0 times

...

Sena

5 months ago

I remember practicing a similar question, and I think response prompts definitely have to do with increasing the likelihood of behaviors.

upvoted 0 times

...