CISM Compliance and Regulatory Requirements 3

Question 1

Which of the following BEST describes the role of a CISM in supporting a regulatory examination?

Accepted Answer

Coordinating the organization's response and ensuring requested evidence is complete and accurate

Answer

The CISM coordinates the examination response, ensuring examiners receive complete, accurate evidence while collaborating with legal, compliance, and business teams.

Question 2

When a compliance requirement conflicts with a security best practice, a CISM should FIRST:

Accepted Answer

Analyze whether the compliance baseline is sufficient or whether compensating controls are needed

Answer

When compliance and best practice conflict, the CISM should analyze whether the compliance baseline provides adequate security or whether additional compensating controls are required.

Question 3

Which of the following BEST describes the concept of 'privacy by design' in a compliance context?

Accepted Answer

Embedding privacy protections into systems and processes from the beginning of development

Answer

Privacy by design integrates data privacy protections into systems, processes, and products from inception, rather than adding them as afterthoughts.

Question 4

A CISM discovers that a business unit is non-compliant with a key regulatory requirement. The MOST appropriate action is to:

Accepted Answer

Document the non-compliance, assess risk, and initiate a remediation plan with appropriate escalation

Answer

Non-compliance should be documented, risk-assessed, and addressed through a formal remediation plan with appropriate escalation to management.

Question 5

Which of the following is a KEY benefit of integrating compliance and security program activities?

Accepted Answer

Duplication of effort is reduced and security controls serve multiple purposes simultaneously

Answer

Integrating compliance and security reduces duplication by using shared controls, frameworks, and assessments to meet both security and regulatory objectives efficiently.

CISM - Certified Information Security Manager Practice Test

CISM - Certified Information Security Manager Practice Test

CISM Compliance and Regulatory Requirements 3