CISM · Question #167
After implementing an information security governance framework, which of the following would provide the BEST information to develop an information security project plan?
The correct answer is D. Gap analysis. After implementing an information security governance framework, the gap analysis would provide the best information to develop an information security project plan. A gap analysis identifies the discrepancies between the current state of security and the desired state, which…
Question
After implementing an information security governance framework, which of the following would provide the BEST information to develop an information security project plan?
Options
- ARisk action plans
- BRecent audit results
- CRisk heat map
- DGap analysis
How the community answered
(30 responses)- A13% (4)
- B10% (3)
- C3% (1)
- D73% (22)
Explanation
After implementing an information security governance framework, the gap analysis would provide the best information to develop an information security project plan. A gap analysis identifies the discrepancies between the current state of security and the desired state, which helps prioritize the necessary security initiatives and projects to close those gaps.
Topics
Community Discussion
No community discussion yet for this question.