CISM Exam QuestionsBrowse all questions from this exam

CISM Exam - Question 908


Which of the following is the MOST important consideration when defining an information security framework?

Show Answer
Correct Answer: CD

When defining an information security framework, the most important consideration is the business strategy. The information security framework must align with and support the organization's overall business objectives and goals. This ensures that security measures are relevant, justified, and integrated into the business processes effectively. Other factors like industry standards, organizational culture, and budget are also important, but they all need to be considered within the context of the business strategy to ensure a cohesive and supportive security framework.

Discussion

7 comments
Sign in to comment
RowlandmarcOption: C
Aug 6, 2023

C right?

CISSPSTOption: C
Sep 13, 2023

Many aspects of organization culture are already taken into account while defining the business strategy, in addition to other critical business considerations. Therefore, the answer has to be C, Business strategy.

richck102Option: C
Oct 4, 2023

C. Business strategy

EwuniaOption: C
Aug 11, 2023

for me c

AaronS1990Option: C
Aug 16, 2023

I'm 90% sure this is C. Every other similar question has Business as the main consideration

oluchecpointOption: C
Sep 11, 2023

Option C

arafatms2000Option: C
Jun 21, 2024

C. BUSINESS STRATEGY