CISM · Question #746
An organization's quality management program can BEST support security management by providing:
The correct answer is A. assurance that security requirements are met.. Quality management programs - such as those based on ISO 9001 - are built around structured processes for verification, validation, and assurance that defined requirements are consistently met. Applied to security, this means independently verifying that security controls and req
Question
An organization’s quality management program can BEST support security management by providing:
Options
- Aassurance that security requirements are met.
- Bdocumentation of security incidents
- Cguidance for security strategy.
- Dsecurity configuration controls.
How the community answered
(51 responses)- A90% (46)
- B4% (2)
- C6% (3)
Explanation
Quality management programs - such as those based on ISO 9001 - are built around structured processes for verification, validation, and assurance that defined requirements are consistently met. Applied to security, this means independently verifying that security controls and requirements are actually being fulfilled. Documenting incidents, guiding strategy, and implementing configuration controls are security management functions, not quality management's primary contribution.
Topics
Community Discussion
No community discussion yet for this question.