ISACA-Certified Information Security Manager Set 20

When outsourcing information security administration, it is MOST important for an organization to include:

An information security manager determines the organization's critical systems may be vulnerable to a new zero-day attack. The FIRST course of action is to:

Which of the following provides the MOST relevant information to determine the overall effectiveness of an information security program and underlying business processes?

Which of the following provides the GREATEST assurance that an organization allocates appropriate resources to respond to information security events?

Which of the following should occur FIRST in the process of managing security risk associated with the transfer of data from unsupported legacy systems to supported systems?

Which of the following would provide the MOST essential input for the development of an information security strategy?

Which of the following is a PRIMARY security responsibility of an information owner?

When implementing a new risk assessment methodology, which of the following is the MOST important requirement?

What is the PRIMARY goal of an incident management program?

Which of the following is the GREATEST potential exposure created by outsourcing to an application service provider?