nerdexam
Isaca

CISM · Question #865

An organization's information security manager should PRIMARILY leverage its internal audit function to:

Sign in or unlock CISM to reveal the answer and full explanation for question #865. The question stem and answer options stay visible for context.

Submitted by skyler.x· Apr 18, 2026Information Security Governance

Question

An organization's information security manager should PRIMARILY leverage its internal audit function to:

Options

  • Areview policies and procedures.
  • Bidentify control gaps.
  • Cjustify security funding.
  • Dobtain security certification.

Unlock CISM to see the answer

You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Internal Audit#Control Gaps#Security Assurance#Governance Oversight
Full CISM Practice