CISM Certified Information Security Manager Practice Exams, Second Edition, 2nd Edition

CHAPTER 2

Information Security Strategy

This domain includes questions from the following topics:

•  Business alignment

•  Security strategy development

•  Security governance activities

•  Information security strategy development

•  Resources needed to develop and execute a security strategy

•  Obstacles to strategy development and execution

This chapter covers Certified Information Security Manager (CISM) job practice 1, “Information Security Governance,” part B, “Information Security Strategy.” The entire Information Security Governance domain represents 17 percent of the CISM examination.

Supporting Tasks in the CISM job practice that align with the Information Security Governance / Information Security Strategy domain include

1. Identify ...