CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ109

Information Security Risk Management

After a risk assessment, management has approved new countermeasures. Which of the following should be done NEXT?

  • A Schedule the target end date for implementation activities.
  • B Develop an implementation strategy.
  • C Budget the total cost of implementation activities.
  • D Calculate the cost for each countermeasure.
Explanation

An implementation strategy should be developed after management approves countermeasures. It defines the approach for deploying the controls and provides the basis for detailed implementation schedules and budgets.

Community Discussion

No comments yet. Be the first to start the discussion!