CISM: Certified Information Security ManagerDemo

Question

An information security manager plans to implement a security information and event management (SIEM) system that aggregates log data from all systems controlling perimeter access. Which option would BEST support the business case for this initiative to senior management?

A Industry examples of threats detected using a SIEM system
B Alignment with industry best practices
C Independent evidence of a SIEM system's ability to reduce risk
D Metrics related to the number of systems to be consolidated

Explanation

Objective, independent evidence that a SIEM system reduces risk directly demonstrates the initiative’s expected business value and supports management’s investment decision.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ206

Community Discussion