Study. uk . com
  1. Home
  2. All questions
  3. Question 152

CISM study material · question 152 of 1000

Which two reporting duties does the CISM job practice assign to the security manager? Choose two.

  1. Evaluating and reporting information security metrics to key stakeholders
  2. Compiling and presenting reports on programme activities, trends and overall effectiveness
  3. Filing statutory financial disclosures
  4. Publishing incident details to the general public
Show the answer

Answer: B. Compiling and presenting reports on programme activities, trends and overall effectiveness
A. Evaluating and reporting information security metrics to key stakeholders

CISM separates two reporting tasks: compiling and presenting reports to key stakeholders on activities, trends and programme effectiveness, and evaluating and reporting security metrics to key stakeholders.

Challenge yourself on this topic → Study as cards