Exam CISM topic 1 question 82 discussion

Centralized mechanism to...= SIEM

B. detect threats across environments While the other options (A, C, and D) are also important considerations in information security, the primary purpose of a centralized incident identification mechanism is to detect and respond to security threats and incidents consistently across an organization's various environments and systems. This helps in early threat detection and minimizing the potential impact of security incidents. Compliance with corporate policies, preventing unauthorized changes, and detecting potential fraud are important goals as well, but they are often secondary to the central goal of identifying and mitigating security threats.

A centralized mechanism for identifying information security incidents provides a holistic and integrated approach to monitoring and detecting threats across different environments within an organization. This allows for a comprehensive view of security events and potential incidents across various systems, networks, and applications. Centralization enhances the organization's ability to correlate and analyze information from multiple sources, providing a more accurate and timely detection of security incidents. While compliance with corporate policies (Option A), preventing unauthorized changes to networks (Option C), and detecting potential fraud (Option D) are important considerations, the primary emphasis of a centralized mechanism is on effectively identifying and responding to security incidents across the organization's diverse IT landscape.

B. detect threats across environments While the other options (A, C, and D) are also important considerations in information security, the primary purpose of a centralized incident identification mechanism is to detect and respond to security threats and incidents consistently across an organization's various environments and systems. This helps in early threat detection and minimizing the potential impact of security incidents. Compliance with corporate policies, preventing unauthorized changes, and detecting potential fraud are important goals as well, but they are often secondary to the central goal of identifying and mitigating security threats.

detect threats across environments

B for sure

A. comply with corporate policies