nerdexam
IsacaIsaca

CISM · Question #411

CISM Question #411: Real Exam Question with Answer & Explanation

Sign in or unlock CISM to reveal the answer and full explanation for question #411. The question stem and answer options stay visible for context.

Submitted by katya_ua· Apr 18, 2026Information Security Risk Management

Question

A business unit has designed a mobile app to provide services to customers. Which of the following is an information security manager's BEST approach when the business resists implementing a strong password policy due to concerns about the user experience?

Options

  • AReview the security risk with the business unit.
  • BEvaluate the costs and benefits of improving the user experience.
  • CPresent the risk and user impact to senior management.
  • DRequire the business unit to adhere to the policy.

Unlock CISM to see the answer

You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Risk Communication#Stakeholder Management#Password Policies#Security vs. Usability
Full CISM PracticeBrowse All CISM Questions