CISM Exam QuestionsBrowse all questions from this exam

CISM Exam - Question 672


An organization plans to leverage popular social network platforms to promote its products and services. Which of the following is the BEST course of action for the information security manager to support this initiative?

Show Answer
Correct Answer: B

The best course of action for the information security manager to support the organization's initiative to leverage social network platforms is to assess the security risk associated with the use of social networks. By assessing the risk, the information security manager can identify potential threats and vulnerabilities, understand the impact of possible security incidents, and make informed decisions on how to mitigate these risks. This foundational step is crucial in ensuring that any further actions, such as establishing processes or developing security controls, are based on a thorough understanding of the associated risks.

Discussion

7 comments
Sign in to comment
cangurer
Sep 13, 2023

I would go with D. B is the first action, D is the BEST action I believe

Marcelus1714
Aug 3, 2024

Exactly, it says the BEST, it's good do B, but the BEST is D

Gr3yGh0sTOption: B
Nov 2, 2023

The information security manager should first assess the security risk associated with the use of social networks. This will involve identifying the potential threats and vulnerabilities, as well as the impact of a security incident. Once the risks have been assessed, the information security manager can then develop security controls to mitigate those risks.

Nillanash
Jan 4, 2024

B- Assess the security risk associated with the use of social networks. The results of the risk assessment will determine whether to use them or not.

Ban12345
Jul 15, 2024

The question said (to support) not (to decide). (D) is the best answer.

richck102
Jan 7, 2024

B. Assess the security risk associated with the use of social networks.

Marcelus1714Option: D
Aug 3, 2024

it says the BEST, it's good to do B, but the BEST is D

ElDirecOption: B
Sep 19, 2024

I think the assessment of the risks (B), would help develop the procedure (D)

eshahOption: B
Feb 25, 2025

Assessment of security risk.