nerdexam
Isaca

CISM · Question #340

Which of the following is the PRIMARY goal of an information security program?

The correct answer is D. To provide information assets with appropriate protection. The primary goal of an information security program is to provide appropriate protection for the organization’s information assets. This involves ensuring confidentiality, integrity, and availability of data, as well as mitigating risks to the information infrastructure, in…

Submitted by thandi_sa· Apr 18, 2026Information Security Program

Question

Which of the following is the PRIMARY goal of an information security program?

Options

  • ATo minimize information security risk
  • BTo secure the organization's information infrastructure from threats
  • CTo respond to the organization's legal and regulatory requirements
  • DTo provide information assets with appropriate protection

How the community answered

(19 responses)
  • A
    5% (1)
  • C
    11% (2)
  • D
    84% (16)

Explanation

The primary goal of an information security program is to provide appropriate protection for the organization’s information assets. This involves ensuring confidentiality, integrity, and availability of data, as well as mitigating risks to the information infrastructure, in line with legal and regulatory requirements.

Topics

#Information Security Program#Program Objectives#Asset Protection#Security Goals

Community Discussion

No community discussion yet for this question.

Full CISM Practice