CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ399

Information Security Risk Management

Which option is MOST useful for determining an organization’s current capacity to mitigate risk?

  • A Capability maturity model
  • B Vulnerability assessment
  • C Business impact analysis (BIA)
  • D IT security risk and exposure
Explanation

A capability maturity model evaluates the maturity, repeatability, and effectiveness of organizational processes and controls. This provides a measure of the organization’s current ability to mitigate risks.

Community Discussion

No comments yet. Be the first to start the discussion!