nerdexam
IsacaIsaca

CISM · Question #563

CISM Question #563: Real Exam Question with Answer & Explanation

Sign in or unlock CISM to reveal the answer and full explanation for question #563. The question stem and answer options stay visible for context.

Submitted by rohit_dlh· Apr 18, 2026Information Security Incident Management

Question

Which of the following should be the PRIMARY focus of an organization with immature incident detection capabilities?

Options

  • AImproving user awareness
  • BInstalling new firewalls
  • CPerforming penetration testing
  • DUpdating security policies

Unlock CISM to see the answer

You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Incident detection#User awareness#Security controls#Incident management
Full CISM PracticeBrowse All CISM Questions