CISM Certified Information Security Manager Practice Exams, Second Edition, 2nd Edition

CHAPTER 4

Information Security Risk Response

This domain includes questions from the following topics:

•  Risk response options and considerations

•  Responding to risk via risk treatment

•  Ownership of risks, risk treatment, and controls

•  Monitoring and reporting on risk

•  Key risk indicators

This chapter covers Certified Information Security Manager (CISM) Domain 2, “Information Security Risk Management,” part B, “Information Security Risk Response.” The entire Information Security Risk Management domain represents 20 percent of the CISM examination.

Supporting Tasks in the CISM job practice that align with the Information Security Risk Management / Information Security Risk Response domain include

9. Compile and present reports to key ...