VIP Exclusive

CISM VIP Certification Exam

CISM — The Certified Information Security Manager (CISM) is issued by ISACA; the real exam consists of 150 questions over 4 hours, scored on a 200–800 scale with a passing score of 450, covering four domains: Information Security Governance, Information Risk Management, Information Security Program, and Incident Management.

30
Questions
240m
Time Limit
75.00%
To Pass
Question 1 of 30👑 VIP

A newly appointed CISM at a mid-sized financial institution discovers that the board of directors has never formally approved an information security strategy. The CEO argues that security policies are an IT matter and do not require board involvement. Which of the following is the BEST response from the CISM to address this governance gap?

Questions 2–30 and full explanations are VIP-exclusive.