Certified Information Security Manager CISM · Free Practice Question Medium

Question 18

A security manager wants to enact several strategic improvements in the organization and needs to sell these ideas to executives. What type of documents should the security manager develop?
  • A Business case documents
  • B Project plans
  • C Risk analyses
  • D PowerPoint decks
Reveal correct answer

Correct answer: A

Explanation

Correct Answer:

Business case documents is correct. A business case describes a business problem, the current state, the desired end state, and the required resources in business terms suitable for executive audiences.

Incorrect Answers:

PowerPoint decks is incorrect because PowerPoint is generally not the best way to convey a business case.

Project plans is incorrect because project plans are used to manage the details in approved projects.

Risk analyses is incorrect because a risk analysis may indicate or support improvements but by themselves are not effective for promoting strategic improvements.

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need