Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
This question is incomprehensible. Please correct it. Anyway for exclusion my answer is C. But the question has no sense
Periodic risk assessments supply the continuous, evidence-based view of threats, vulnerabilities, likelihood, and impact
A core responsibility of an information security manager is to understand and manage risk. According to ISACA's CISM framework, risk assessments are the foundation of an information security program because they inform: - The development of security strategy, - Resource allocation, - Control selection, - And reporting to stakeholders. While understanding technologies (A), establishing KPIs (B), and obtaining stakeholder input (D) are all important tasks, they are supporting activities. None of them provide the overall risk-based view needed to ensure the program protects the organization effectively.