CISM Question 370

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 2

  C. A maturity model A maturity model provides a structured way to assess the current state of information security governance and measure progress over time. It helps senior management understand how mature their organization's information security practices are and where improvements are needed.

• 1

  C. A maturity model

• Chose C1

  hen illustrating the status of a recently implemented information security governance framework to senior management, the MOST useful tool would be a maturity model