CISM: Certified Information Security ManagerDemo

Question

Which of the following would be MOST useful for determining the current maturity level of an information security program?

A Business impact analysis (BIA)
B Cost-benefit analysis
C Benchmark analysis
D Risk assessment

Explanation

Benchmark analysis compares an information security program’s capabilities and practices with established maturity criteria or peer performance, enabling its current maturity level to be assessed.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ995

Community Discussion