CISM › Information Security Governance

Information Security Governance Practice Questions

Domain 1 of the CISM exam covers establishing and maintaining an information security governance framework that aligns security strategy with business objectives. Questions test governance structures, roles and reporting lines, regulatory and legal drivers, policy hierarchy, risk appetite, metrics reported to the board, and how security culture and third-party relationships are governed and measured.