A new information security manager finds that the organization tends to use short-term solutions to...

Vendor: Isaca
Product: CISM
Update on: Jul 25, 2025
Questions: 967

Isaca CISM Question Answer

A new information security manager finds that the organization tends to use short-term solutions to address problems. Resource allocation and spending are not effectively tracked, and there is no assurance that compliance requirements are being met. What should be done FIRST to reverse this bottom-up approach to security?

Conduct a threat analysis.

Implement an information security awareness training program.

Establish an audit committee.

Create an information security steering committee.