Free Isaca CISM Exam Questions

Become Isaca Certified with updated CISM exam questions and correct answers

Page: 1 / 239

Total 1191 Questions | Updated On: Oct 26, 2026

Add To Cart

Question 1

Which of the following is the PRIMARY responsibility of an information security governance committee?

A : Discussing upcoming information security projects

B : Reviewing the information security risk register

C : Approving changes to the information security strategy

D : Reviewing monthly information security metrics

Answer: C

Question 2

Which of the following is the MOST important factor of a successful information security program?

A : The program follows industry best practices.

B : The program is based on a well-developed strategy.

C : The program is cost-efficient and within budget,

D : The program is focused on risk management.

Answer: D

Question 3

Which of the following BEST helps to ensure a risk response plan will be developed and executed in a timely manner?

A : Establishing risk metrics

B : Training on risk management procedures

C : Reporting on documented deficiencies

D : Assigning a risk owner

Answer: D

Question 4

The PRIMARY purpose for deploying information security metrics is to:

A : compare program effectiveness to benchmarks.

B : support ongoing security budget requirements.

C : ensure that technical operations meet specifications.

D : provide information needed to make decisions.

Answer: D

Question 5

Which of the following is the MOST important consideration when establishing an organization's information security governance committee?

A : Members have knowledge of information security controls.

B : Members are business risk owners.

C : Members are rotated periodically.

D : Members represent functions across the organization.

Answer: D

Page: 1 / 239

Total 1191 Questions | Updated On: Oct 26, 2026

Add To Cart