Certified Information Security Manager CISM · Free Practice Question Medium
Question 34
You are the Information Security Manager of HDA Inc. You are tasked with establishing an information security program. What should be the primary focus of this program?
- A A. Compliance with industry standards
- B B. Implementation of the latest technologies
- C C. Results of the risk assessments
- D D. Adherence to regulatory requirements
Reveal correct answer
Correct answer: C
Explanation
Correct Answer: C. Results of the risk assessments Explanation: The primary focus of an information security program should be on the results of risk assessments, ensuring that security measures are aligned with identified risks and vulnerabilities. This approach helps prioritize efforts and resources to address the most critical aspects of information security based on an organization's specific risk profile.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
