CISM Question 175

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A2

  The primary benefit of implementing a maturity model for information security management is that it helps identify gaps between the current state of security and the desired or optimal state. This allows the organization to prioritize and address these gaps systematically, improving the overall maturity of its information security management program.

• 1

  C maturity model is used to assess the security state of an organisation against industry benchmarks

• Chose A1

  A- Maturity models identify the gaps between the current state of the governance process and the desired state. This helps the organization to determine the remediation steps required for improvement