Study. uk . com
  1. Home
  2. All questions
  3. Question 66

CISM study material · question 66 of 1000

Monitoring consistently shows that one control family underperforms, but funding allocations the following year are unchanged. Which governance practice is not working?

  1. Assigning security responsibilities to trained individuals whose qualifications are reviewed each time the role changes hands
  2. Using information discovered through monitoring as an input to decisions about priorities and funding
  3. Communicating security priorities to all stakeholders
  4. Monitoring the performance of the programme continuously
Show the answer

Answer: B. Using information discovered through monitoring as an input to decisions about priorities and funding

SP 800-100 expects what monitoring reveals to feed management's choices about what gets priority and what gets funded. Unchanged allocations after a year of poor results mean that loop is broken.

Source: NIST SP 800-100 (NIST) — Sec. 2.3 Challenges and Keys to Success

Challenge yourself on this topic → Study as cards