Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
CISM Exam Prep Guide by Hemang Doshi, page 45: A maturity model is a tool that helps the organization assess the current effectiveness of a process and determine what capabilities they need to improve their performance. Capability maturity models (CMMs) are useful to determine the maturity level of governance processes.
CMM - this is an organisation based question.
The correct answer is D. IT security risk and exposure. Explanation: Among the options provided, IT security risk and exposure is the most helpful in determining an organization's current capacity to mitigate risks. Here's why this option is the most helpful: D. IT security risk and exposure: Assessing IT security risks and exposures provides insight into the vulnerabilities, threats, and potential impacts on the organization's information systems and assets. This information helps gauge the organization's capacity to mitigate risks by understanding the specific areas where vulnerabilities exist and where protective measures are required