CISM: Certified Information Security ManagerDemo

Question

Which of the following would be MOST helpful in enabling senior management to understand the status of information security compliance?

A Key performance indicators (KPIs)
B Risk assessment results
C Industry benchmarks
D Business impact analysis (BIA) results

Explanation

Key performance indicators translate security-control and compliance performance into measurable, management-level status information. Information-security measures are used to assess the adequacy of security policies, procedures, and controls and support reporting and decision-making.

Learn more

NIST SP 800-55 Vol. 1: Measurement Guide for Information Security—Identifying and Selecting Measures

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ17

Community Discussion