Most candidates gravitate toward the simulator version, and for good reason — it recreates the real test scene, records every practice attempt, and points out the questions you got wrong so you can repeat them until they are mastered. The ISACA Certified Information Security Manager PDF at ExamTorrent covers the paper-and-pen side of study.
ISACA CISM Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Information Security Program Development and Management | 33% | - Resource and program lifecycle management - Integrate security requirements into business processes - Develop and manage an information security program |
| Information Security Governance | 17% | - Establish and maintain an information security governance framework - Align information security strategy with organizational goals |
| Information Risk Management | 20% | - Identify and evaluate information security risks - Implement risk response strategies |
| Information Security Incident Management | 30% | - Detect, investigate, and manage security incidents - Post-incident analysis and improvement - Plan and establish incident response capabilities |
ISACA Certified Information Security Manager Questions Buyers Commonly Ask
- Information Security Governance (17%)
- Information Risk Management (20%)
- Information Security Program Development and Management (33%)
ISACA Certified Information Security Manager Sample Questions:
Which of the following is the MOST important criterion when deciding whether to accept residual risk?
- A. Annual rate of occurrence
- B. Cost of additional mitigation
- C. Cost of replacing the asset
- D. Annual loss expectancy (ALE)
Correct Answer: D 🗳️
Explanation: Only visible for ExamTorrent members. You can sign-up / login (it's free).
Which of the following is MOST important to ensuring that incident management plans are executed effectively?
- A. Management support and approval has been obtained.
- B. An incident response maturity assessment has been conducted.
- C. The incident response team has the appropriate training.
- D. A reputable managed security services provider has been engaged.
Correct Answer: A 🗳️
Which of the following is the MOST important reason to have documented security procedures?
- A. To facilitate the process of information security metrics reporting
- B. To meet regulatory requirements related to standard operating procedures
- C. To demonstrate alignment with business security objectives
- D. To guide the implementation of policy requirements
Correct Answer: D 🗳️
Explanation: Only visible for ExamTorrent members. You can sign-up / login (it's free).
Which of the following would BEST mitigate accidental data loss events?
- A. Conduct a data loss prevention (DLP) audit.
- B. Conduct periodic user awareness training.
- C. Enforce a data hard drive encryption policy.
- D. Obtain senior management support for the information security strategy.
Correct Answer: B 🗳️
Explanation: Only visible for ExamTorrent members. You can sign-up / login (it's free).
An organization is leveraging tablets to replace desktop computers shared by shift-based staff These tablets contain critical business data and are inherently at increased risk of theft Which of the following will BEST help to mitigate this risk ' '
- A. Conduct a mobile device risk assessment
- B. Create an acceptable use policy.
- C. Implement remote wipe capability.
- D. Deploy mobile device management (MDM)
Correct Answer: A 🗳️
Explanation: Only visible for ExamTorrent members. You can sign-up / login (it's free).
794 Customer Reviews
