easyMultiple ChoiceObjective-mapped
CISM Practice Question: Is the PRIMARY role of the board of directors in…
Which of the following is the PRIMARY role of the board of directors in information security governance?
⚠ Common exam trap
ISACA often tests the distinction between governance (board) and management (CISO/IT) roles, and the trap here is that candidates mistakenly assign tactical implementation duties to the board because they confuse oversight with execution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Providing strategic direction and oversight of the security program.
The board of directors holds the ultimate fiduciary responsibility for the organization, including its information security posture. Their primary role is to provide strategic direction and oversight, ensuring that the security program aligns with business objectives, risk appetite, and regulatory requirements. This includes approving the overall security strategy, reviewing key risk indicators, and holding management accountable for security performance, not executing tactical tasks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Managing the day-to-day security operations.
Why it's wrong here
Operational responsibility of security teams.
- ✗
Implementing security controls and technologies.
Why it's wrong here
Operational task delegated to management.
- ✓
Providing strategic direction and oversight of the security program.
Why this is correct
The board ensures security aligns with business strategy.
- ✗
Developing detailed security policies and procedures.
Why it's wrong here
Typically developed by security management.
Go deeper
Related to this question
About these practice questions
One of 871 original CISM practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.