Free Isaca CISM Exam Questions

Which of the following is established during the preparation phase of an incident response plan?

Which of the following is the MOST effective defense against malicious insiders compromising confidential information?

Which or the following is MOST important to consider when determining backup frequency?

When developing an asset classification program, which of the following steps should be completed FIRST? 

A new information security manager finds that the organization tends to use short-term solutions to address problems. Resource allocation and spending are not effectively tracked, and there is no assurance that compliance requirements are being met. What should be done FIRST to reverse this bottom-up approach to security?