ISACA Certified Information Security Manager Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  The tool has already been purchased; hence, reporting capabilities, contract, and tech support are in the aftermath and are inputs: something that was considered before purchase, not just before implementation.

• Chose A1

  Controls to be monitored

• Chose A10

  This one was a tough one, but I don't think it's C. As people mentioned, the contract was already signed. Technical support is a close second, but how will they know how to help if you don't know what controls you are monitoring... A. Controls to be Monitored By knowing what controls are to be monitored, you can design your architecture of how a SIEM ingests data around compliance regulations such as PCI, HIPA, and SOX.