Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Always assess before notifying management, as you need to be prepared to speak on it.
Read the question well, it did not say the ISM suspects or was told of the noncompliance. It categorically says 'He has become aware of the issue' . So the question is asking for the BEST next step. since he has already assessed the issue (which is how he became aware of it in the first place) option A is out of the window and since the ISM can not take executive decisions all by himself, it makes perfect sense that he would pull management in before he acts on the issue so C is the right answer
C. Notify senior management of the issue. (Best course of action and ISM is aware of the issue)