CISM-001 Cism Practice Questions

A company has a data breach where customer information was leaked. What is the first step the CISM should take?

• AA. Develop new policies
• BB. Conduct a forensic analysis
• CC. Notify customers
• DD. Patch security flaws

A CISM is conducting a security awareness training session. Which topic should be emphasized the most?

• AA. Software updates
• BB. Password security
• CC. Digital marketing
• DD. Office etiquette

After a security incident, which step should a CISM take following the immediate response?

• AA. Inform stakeholders
• BB. Post-incident review
• CC. Recall all devices
• DD. Update security software

A CISM is tasked with evaluating the effectiveness of security controls. What method is most appropriate?

• AA. Expert interviews
• BB. Social media analysis
• CC. User feedback
• DD. Automated tests

A new employee is being onboarded with access to sensitive company data. What is the first step the CISM should take?

• AA. Issue a security badge
• BB. Conduct a background check
• CC. Provide training
• DD. Review access rights

A CISM is evaluating an organization's security posture. What key element should be considered first?

• AA. Overall security budget
• BB. Employee training
• CC. Existing incidents
• DD. Compliance with regulations