Certified Information Security Manager CISM · Free Practice Question Easy
Question 70
Failures of information security programs have been caused by all of the following except which one?
- A Focus on information risk
- B Focus on system protection
- C Focus on technology solutions
- D Focus on network protection
Reveal correct answer
Correct answer: A
Explanation
Correct Answer:
Focus on information risk is correct. Information security programs in many organizations have failed because of their focus on networks, systems, and technology solutions, while ignoring the most valuable resource: data and information.
Incorrect Answers:
The remaining answers are incorrect. All of these choices are incorrect because they are valid causes for the failure of an information security program. Generally, focusing only on technology means there is less focus on business alignment and information risk.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
