CISM Question 35

Question

The chief information security officer (CISO) has developed an information security strategy, but is struggling to obtain senior management commitment for funds to implement the strategy. Which of the following is the MOST likely reason?
A. The strategy does not include a cost-benefit analysis.
B. There was a lack of engagement with the business during development.
C. The strategy does not comply with security standards.
D. The CISO reports to the CIO.

Accepted Answer

Marked answer: B. There was a lack of engagement with the business during development.

CISM Question 35

Community Discussion

Preparing Practice Exam…

CISM Question 35

Community Discussion