Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Get Unlimited Access

Isaca Discussions

Exam CISA topic 1 question 475 discussion

Actual exam question from Isaca's CISA

Question #: 475
Topic #: 1

[All CISA Questions]

Which of the following is the BEST indication that an information security program is aligned with organizational objectives?

A. Senior management conducts regular reviews of information security policies.
B. The information security steering committee sets organizational security priorities.
C. Risk is managed to within organizational tolerances.
D. Information security processes are in place throughout the system development life cycle (SDLC).

Show Suggested Answer

Suggested Answer: C 🗳️

by Changwha at July 21, 2023, 12:48 p.m.

Comments

Submit Cancel

Swallows

4 weeks, 1 day ago

Selected Answer: C

While having information security processes in place throughout the system development life cycle (SDLC) (option D) is important for building security into the organization's systems and applications, it may not necessarily guarantee alignment with organizational objectives. However, managing risk to within organizational tolerances directly reflects the organization's strategic priorities and ensures that the information security program is contributing to the achievement of those objectives. Therefore, option C is the BEST indication of alignment with organizational objectives.

upvoted 1 times

Swallows

23 hours, 19 minutes ago

While senior management conducting regular reviews of information security policies (option A) is important for oversight and governance, it does not necessarily guarantee that security activities are aligned with organizational objectives in terms of risk management and strategic alignment.

upvoted 1 times

...