Discuss Isaca CISM Exam Topic 7 Question 6

Which of the following is the MOST effective way to incorporate risk management practices into a new business process?

AConduct quality assurance reviews.

BReview threat assessments.

CUpdate company policies.

DEnforce change management.

Suggested Answer: D

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Mariko 11 months ago

Quality assurance reviews can help, but they aren't enough alone.

Rosio 12 months ago

Wait, enforcing change management? That seems off.

Ronald 12 months ago

Updating policies is important too, but not the most effective.

Mila 12 months ago

Totally agree, B is the way to go!

Leontine 1 year ago

I think reviewing threat assessments is key.

Georgiann 1 year ago

Conducting quality assurance reviews sounds familiar, but I wonder if that really fits into risk management directly. It feels more about maintaining standards.

Caren 1 year ago

I remember a practice question where updating company policies was emphasized. Maybe that could be effective too, but I feel like it might not address immediate risks.

Alita 1 year ago

I think reviewing threat assessments might be the best option, but I'm not entirely sure. It seems like understanding potential risks is crucial.

Tony 1 year ago

Enforcing change management could help, but I’m not confident it’s the most effective method. I feel like it’s more about managing transitions than risks themselves.

Darrel 1 year ago

I'm a little confused by this question. I know the Predicate interface is related to functional programming, but I'm not entirely sure about the specifics of the single abstract method. I'll have to review my notes on that.

Taryn 1 year ago

I'm a little confused by this question. I know there are different network protocols, but I'm not sure which one specifically handles logical addressing for routing. I'll have to review my notes on the OSI model to refresh my memory.

Lucy 1 year ago

Hmm, I'm a bit confused on where the Cloud Router should be placed. I'll need to review the details about the projects and VPC networks.

Johnetta 1 year ago

I think editing the activity in the Experiences step makes sense because that's where we set up the test variations. It's a little fuzzy, though.

Isaca CISM Exam - Topic 7 Question 6 Discussion