CISM Question 134

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D3

  Improving access security (D) directly reduces the risk of unauthorized access, which can prevent data breaches, protect intellectual property, and maintain customer trust. These factors contribute to long-term business continuity and can potentially save the organization from significant financial and reputational damage. Reducing administrative workload (C) can indeed be a business advantage by freeing up IT resources and cutting down on administrative overhead. However, the primary justification for implementing security tokens often revolves around enhancing security first, with administrative benefits being a secondary advantage. In the context of CISM, the emphasis is often on the primary purpose of security controls, which is why D. improve access security is considered the best answer.

• Chose C1

  business wise

• 1

  The question is asking what is the business advantage. This leaves you with either b or c. C is the best answer that coordinates with implementing authentication tokens. Improving security is not necessarily a direct business advantage.