Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A steering committee isn't independent, it's internal to the organisation and made up of a diverse group of resources. Thus C cannot be the answer. The foundational requirement of a steering committee is to set objectives (i.e goals).
Clearly its B and not C: How can you conduct reviews, if the information security objectives are not set? On what basis will you conduct regular reviews? None.
The most important function of an information security steering committee is to ensure that the information security strategy aligns with the broader corporate strategy, which involves defining the objectives of the information security framework (B).