CISM · Question #405
An information security manager has been hired to fix a failed security program. What is the FIRST step when preparing an information security plan for executive management?
The correct answer is A. Determine the current state of security. Before creating an effective security plan, the information security manager must first assess the current state of security within the organization. This includes evaluating existing security controls, identifying gaps, reviewing past incidents, and understanding the…
Question
An information security manager has been hired to fix a failed security program. What is the FIRST step when preparing an information security plan for executive management?
Options
- ADetermine the current state of security.
- BDevelop specific security solutions.
- CIdentify controls.
- DIdentify security requirements for new initiatives
How the community answered
(22 responses)- A91% (20)
- C5% (1)
- D5% (1)
Explanation
Before creating an effective security plan, the information security manager must first assess the current state of security within the organization. This includes evaluating existing security controls, identifying gaps, reviewing past incidents, and understanding the organization's risk posture. This assessment serves as the foundation for developing a strategic security plan that aligns with business objectives and effectively addresses security weaknesses.
Topics
Community Discussion
No community discussion yet for this question.