CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ20

VerifiedInformation Security Program

Which option is the BEST method for determining the gap between an information security program’s current state and its desired state?

Explanation

A capability maturity model evaluation measures the program’s current maturity against its target maturity level, revealing the gap between present capabilities and the desired state.

Community Discussion

No comments yet. Be the first to start the discussion!