Isaca Updated CISM Exam Questions and Answers by lennox

Current resourcing levels

Availability of potential resources

Information security strategy

Information security incidents

Purchase forensic standard operating procedures.

Provide forensics training to the information security team.

Ensure the incident response policy allows hiring a forensics firm.

Retain a forensics firm prior to experiencing an incident.

Assess the residual risk.

Share lessons learned with the organization.

Update the system's documentation.

Allocate budget for penetration testing.

Vulnerability assessment

Asset classification

Threat analysis

Internal audit findings