Free Isaca CISM Exam Questions

Become Isaca Certified with updated CISM exam questions and correct answers

Page: 1 / 195

Total 975 Questions | Updated On: Sep 10, 2025

Add To Cart

Question 1

An organization wants to integrate information security into its HR management processes. Which of the following should be the FIRST step?

A : Benchmark the processes with best practice to identify gaps.

B : Calculate the return on investment (ROI).

C : Provide security awareness training to HR.

D : Assess the business objectives of the processes.

Answer: D

Question 2

Which of the following should an information security manager do NEXT after creating a roadmap to execute the strategy for an information security program?

A : Obtain consensus on the strategy from the executive board.

B : Review alignment with business goals.

C : Define organizational risk tolerance.

D : Develop a project plan to implement the strategy.

Answer: D

Question 3

Which of the following should be the GREATEST concern for an information security manager when an annual audit reveals the organization's business continuity plan (BCP) has not been reviewed or updated in more than a year?

A : An outdated BCP may result in less efficient recovery if an actual incident occurs.

B : The organization may suffer reputational damage for not following industry best practices.

C : The audit finding may impact the overall risk rating of the organization.

D : The lack of updates to the BCP may result in noncompliance with internal policies.

Answer: A

Question 4

Which of the following is the BEST way to ensure the capability to restore clean data after a ransomware attack?

A : Purchase cyber insurance

B : Encrypt sensitive production data

C : Perform Integrity checks on backups

D : Maintain multiple offline backups

Answer: D

Question 5

A recent audit found that an organization's new user accounts are not set up uniformly. Which of the following is MOST important for the information security manager to review?

A : Automated controls

B : Security policies

C : Guidelines

D : Standards

Answer: D

Page: 1 / 195

Total 975 Questions | Updated On: Sep 10, 2025

Add To Cart