CISM: Certified Information Security ManagerDemo

Question

An information security manager discovers through a threat intelligence service that the organization could be targeted by a significant emerging threat. What should be the information security manager’s FIRST course of action?

A Conduct an information security audit
B Perform a gap analysis
C Validate the relevance of the information
D Inform senior management

Explanation

Threat intelligence must be assessed for credibility, applicability, and potential impact on the organization before initiating audits, performing a gap analysis, or escalating the matter to senior management.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ1032

Community Discussion