CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ936

Information Security Governance

Which of the following BEST enables an information security manager to assess the comprehensiveness of an organization’s information security strategy?

  • A Internal security audit
  • B Organizational risk appetite
  • C External security audit
  • D Business impact analysis (BIA)
Explanation

A business impact analysis (BIA) identifies critical business functions, dependencies, and the impact of their disruption. It establishes the business requirements that an information security strategy must address, making it the strongest basis for evaluating whether the strategy is comprehensive.

Community Discussion

No comments yet. Be the first to start the discussion!