CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ391

Information Security Program

An organization intends to incorporate information security into its HR management processes. Which of the following should be the FIRST step?

  • A Calculate the return on investment (ROI).
  • B Provide security awareness training to HR.
  • C Assess the business objectives of the processes.
  • D Benchmark the processes with best practice to identify gaps.
Explanation

Security integration should be aligned with the business objectives of the HR processes it supports. Those objectives establish the relevant security requirements and priorities, which can subsequently guide gap analysis, training, and investment decisions.

Community Discussion

No comments yet. Be the first to start the discussion!