nerdexam
Isaca

CISM · Question #746

An organization's quality management program can BEST support security management by providing:

The correct answer is A. assurance that security requirements are met.. Quality management programs - such as those based on ISO 9001 - are built around structured processes for verification, validation, and assurance that defined requirements are consistently met. Applied to security, this means independently verifying that security controls and req

Submitted by alyssa_d· Apr 18, 2026Information Security Governance

Question

An organization’s quality management program can BEST support security management by providing:

Options

  • Aassurance that security requirements are met.
  • Bdocumentation of security incidents
  • Cguidance for security strategy.
  • Dsecurity configuration controls.

How the community answered

(51 responses)
  • A
    90% (46)
  • B
    4% (2)
  • C
    6% (3)

Explanation

Quality management programs - such as those based on ISO 9001 - are built around structured processes for verification, validation, and assurance that defined requirements are consistently met. Applied to security, this means independently verifying that security controls and requirements are actually being fulfilled. Documenting incidents, guiding strategy, and implementing configuration controls are security management functions, not quality management's primary contribution.

Topics

#Quality Management#Security Assurance#Information Security Governance#Requirements Management

Community Discussion

No community discussion yet for this question.

Full CISM Practice