CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ27

Information Security Program

Which of the following is the BEST method to determine whether a recent investment in access control software was successful?

  • A Senior management acceptance of the access control software
  • B A comparison of security incidents before and after software installation
  • C A business impact analysis (BIA) of the systems protected by the software
  • D A review of the number of key risk indicators (KRIs) implemented for the software
Explanation

Control-investment success is best evaluated through outcome-based measures. A comparison of security incidents before and after the software is installed shows whether the access control has reduced relevant security events.

Community Discussion

No comments yet. Be the first to start the discussion!