nerdexam
Isaca

CISM · Question #351

Which of the following is MOST important to the ongoing effectiveness of an information security governance framework?

The correct answer is C. Adaptability to changing business needs. The ongoing effectiveness of an information security governance framework is most dependent on its adaptability to changing business needs. As business environments and technologies evolve, the framework must be flexible enough to address new risks and align with the…

Submitted by suresh_in· Apr 18, 2026Information Security Governance

Question

Which of the following is MOST important to the ongoing effectiveness of an information security governance framework?

Options

  • AAbility to identify threats
  • BAnnual review of the risk register
  • CAdaptability to changing business needs
  • DA focus on business process controls

How the community answered

(53 responses)
  • A
    15% (8)
  • B
    8% (4)
  • C
    74% (39)
  • D
    4% (2)

Explanation

The ongoing effectiveness of an information security governance framework is most dependent on its adaptability to changing business needs. As business environments and technologies evolve, the framework must be flexible enough to address new risks and align with the organization's goals.

Topics

#Information Security Governance#Framework Effectiveness#Adaptability#Business Alignment

Community Discussion

No community discussion yet for this question.

Full CISM Practice