Study. uk . com
  1. Home
  2. All questions
  3. Question 23

CISM study material · question 23 of 1000

The board asks the security manager for a definition of governance it can apply beyond security. Which of these matches the definition SP 800-39 uses?

  1. Setting direction, ensuring objectives are achieved, ascertaining risks are managed, and verifying resources are used responsibly
  2. Approving budgets and appointing the security leadership
  3. Selecting, implementing and testing the control baseline
  4. Monitoring compliance with law and reporting breaches to regulators
Show the answer

Answer: A. Setting direction, ensuring objectives are achieved, ascertaining risks are managed, and verifying resources are used responsibly

SP 800-39 defines governance as the responsibilities and practices of those in charge, aimed at providing strategic direction, achieving objectives, managing risk appropriately and using resources responsibly.

Source: NIST SP 800-39 (NIST) — Sec. 2.3.1 Governance

Challenge yourself on this topic → Study as cards