Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Risk tolerance determines what level of control is required. Culture influences how the control is introduced and adopted.
The PRIMARY driver for selecting and implementing appropriate controls to address the risk associated with weak user passwords is: A. The organization's risk tolerance. The organization's risk tolerance defines how much risk is acceptable and helps to determine the level of protection needed. If weak passwords present a high risk, the organization must implement controls that are proportional to the level of risk it is willing to accept.
A = because The organization tolerance for risk will determine their approach and mitigation strategies.