CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ512

Information Security Program

The primary purpose of deploying information security metrics is to:

  • A ensure that technical operations meet specifications.
  • B compare program effectiveness to benchmarks.
  • C support ongoing security budget requirements.
  • D provide information needed to make decisions.
Explanation

Information security metrics supply objective, relevant data for assessing security performance, risk, and control effectiveness so that stakeholders can make informed decisions. Compliance with technical specifications, benchmark comparisons, and budget support are possible secondary uses of those measurements.

Community Discussion

No comments yet. Be the first to start the discussion!