Study. uk . com
  1. Home
  2. All questions
  3. Question 147

CISM study material · question 147 of 1000

A manager is about to draft a new information security strategy. Which CISM task should come before the strategy itself is written?

  1. Appointing the incident response team leader
  2. Selecting the control baseline for each system, so that the strategy can be written against the controls already chosen
  3. Identifying internal and external influences on the organisation that affect the security strategy
  4. Establishing the incident classification scheme, so that the strategy can be written against known escalation thresholds
Show the answer

Answer: C. Identifying internal and external influences on the organisation that affect the security strategy

CISM lists identifying internal and external influences on the organisation that impact the information security strategy as a supporting task, preceding the establishment of the strategy itself.

Challenge yourself on this topic → Study as cards