Exam CISM topic 1 question 66 discussion

horribly written question.

This question does to lend itself to any of the answers.

The question asked in an ambiguous way

What are they even asking here. Delete it.

An information security manager must have an understanding of an information security program, and obtaining stakeholder input is a crucial aspect of this understanding. Stakeholder input helps in identifying the needs, expectations, and priorities of different stakeholders within the organization, which, in turn, contributes to the development and implementation of an effective information security program.

I answered KPIs, and then I checked with Bard after seeing everyone's vote - this is what Bard said: The answer is B. Establishing key performance indicators (KPIs). An information security manager must have a strong understanding of all the aspects of an information security program, but establishing key performance indicators (KPIs) is the most crucial aspect. Key performance indicators (KPIs) are measurable metrics that track the progress and effectiveness of an organization's information security program. Establishing KPIs allows the information security manager to:

Understanding an information security program is crucial for an information security manager to effectively conduct periodic risk assessments. By having an understanding of the program, the manager can identify and assess potential risks to the organization's information assets, systems, and processes. This understanding is foundational for implementing appropriate controls, mitigating risks, and ensuring the ongoing effectiveness of the information security program. While understanding current and emerging technologies (option A), establishing key performance indicators (KPIs) (option B), and obtaining stakeholder input (option D) are also important aspects of information security management, they may be influenced by or contribute to the overall understanding of the information security program. However, conducting periodic risk assessments is a specific activity that directly relies on this understanding.

Not going to answer the question because it does not make sense! haha

Option D

Wording is wrong. So, the answer is that an information security manager should have a comprehensive understanding of all these areas to effectively manage an information security program.

Poorly written. I guess the answer is TRUE? Lmao

Risk assessment

D. Obtaining stakeholder input

D. Obtaining stakeholder input

The question is asking which of the following is a necessary understanding that an information security manager must have regarding an information security program. Conducting periodic risk assessments: Conducting periodic risk assessments is an important component of an information security program, and an information security manager must have an understanding of how to conduct them.

Please remove or rewrite the question. It is not really a question.

what is this basura