nerdexam
Isaca

CISM · Question #518

Which of the following attributes is MOST important to consider when planning to adopt a recognized standard or framework for information security?

The correct answer is B. Applicability to the organization's needs. The most important attribute to consider when adopting a recognized standard or framework for information security is its applicability to the organization's needs. The chosen framework should align with the organization's specific risks, goals, regulatory requirements, and…

Submitted by sofia.br· Apr 18, 2026Information Security Governance

Question

Which of the following attributes is MOST important to consider when planning to adopt a recognized standard or framework for information security?

Options

  • ACost-benefit of implementation
  • BApplicability to the organization's needs
  • CAbility to measure and compare
  • DEase of organization-wide implementation

How the community answered

(19 responses)
  • A
    21% (4)
  • B
    68% (13)
  • C
    5% (1)
  • D
    5% (1)

Explanation

The most important attribute to consider when adopting a recognized standard or framework for information security is its applicability to the organization's needs. The chosen framework should align with the organization's specific risks, goals, regulatory requirements, and operational environment to be effective in enhancing the organization's information security posture.

Topics

#Information Security Frameworks#Strategic Planning#Organizational Needs#Governance

Community Discussion

No community discussion yet for this question.

Full CISM Practice