ISACA Certified Information Security Manager Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  I would go for D. we are talking about mobile devices which might get stolen...and they must get remotely wiped out according to the Security Policy. The question is more related to the mobile device...and not generally to the Policies that the CISO takes care of....in my opinion.

• Chose B1

  While the other options (A, C, and D) are also important responsibilities of an information security manager, enforcing passwords and data encryption on mobile devices directly addresses the security of the devices themselves and the protection of sensitive information they may contain or access.

• Chose B3

  Enforcing passwords and data encryption on mobile devices is a fundamental security measure to protect sensitive information in case of device loss or theft. Passwords add a layer of access control, and data encryption ensures that even if the device is compromised, the stored data remains secure. While reviewing and updating existing security policies (option A), conducting security awareness training (option C), and requiring remote wipe capabilities for devices (option D) are important aspects of mobile device security, enforcing passwords and data encryption directly addresses the protection of data on the devices themselves, which is a foundational responsibility for information security managers in a mobile device implementation scenario.