CIMS Pre-Assessment Examination A

CIMS Pre-Assessment Examination A Certified Information System Manager CIMS Question 1 A multinational organization operating in fifteen countries is considering implementing an information security program. Which factor will MOST influence the design of the Information security program? A. Representation by regional business leaders B. Composition of the board Correct Answer: C C. Cultures of the different countries D. IT security skills QUESTION 2 Which of the following is the BEST justification to convince management to invest in an information security program? A. Cost reduction B. Compliance with company policies Correct Answer: D C. Protection of business assets D. Increased business value QUESTION 3 On a company's e-commerce web site, a good legal statement regarding data privacy should include: A. a statement regarding what the company will do with the information it collects. B. a disclaimer regarding the accuracy of information on its web site. C. technical information regarding how information is protected. D. a statement regarding where the information is being hosted. Correct Answer: A QUESTION 4 The MOST important factor in ensuring the success of an information security program is effective: A. communication of information security requirements to all users in the organization. B. formulation of policies and procedures for information security. C. alignment with organizational goals and objectives. D. monitoring compliance with information security policies and procedures. Correct Answer: C QUESTION 5 Which of the following would be MOST helpful to achieve alignment between information security and organization objectives? A. Key control monitoring B. A robust security awareness program C. A security program that enables business activities D. An effective security architecture Correct Answer: C QUESTION 6 Which of the following BEST contributes to the development of a security governance framework that supports the maturity model concept? A. Continuous analysis, monitoring and feedback Page | 2 B. Continuous monitoring of the return on security investment (ROSI) C. Continuous risk reduction D. Key risk indicator (KRI) setup to security management processes Correct Answer: A