CISM: Certified Information Security ManagerDemo

Question

To optimize the implementation of information security governance within an organization, an information security manager should:

A implement processes consistent with international standards.
B utilize existing governance structures when possible.
C ensure changes are consistent with existing standards.
D make gradual changes to governance to minimize employee resistance.

Explanation

Information security governance is most effective when it leverages existing organizational governance mechanisms as far as possible. This embeds security oversight into established accountability and decision-making structures, reduces duplication, and improves alignment with organizational objectives.

Learn more

Holistic IT Governance, Risk Management, Security and Privacy Needed for Effective Implementation

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ964

Community Discussion