Courseiva
Leadership And Organizational ManagementeasyMultiple ChoiceObjective-mapped

ISC Leadership And Organizational Management Practice Question

During a cross-functional security planning session, the IT operations team argues that security controls are negatively impacting system performance. As an ISSMP, what is the most appropriate management approach to resolve this conflict?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Perform a joint business impact analysis to determine the optimal balance of security and performance

Effective security management involves balancing security needs with business operational requirements through a collaborative risk-based approach, ensuring security is integrated rather than imposed.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Perform a joint business impact analysis to determine the optimal balance of security and performance

    Why this is correct

    A BIA allows all stakeholders to quantify the risk and make a consensus-based decision.

  • Enforce the security controls regardless of performance impacts

    Why it's wrong here

    This approach ignores the business requirements and will lead to friction.

  • Escalate the issue to the CIO for a final decision without further analysis

    Why it's wrong here

    Escalation should be a last resort; collaborative resolution is preferred.

  • Reduce security controls until performance targets are met

    Why it's wrong here

    This ignores the inherent security risk and fails to address the business needs properly.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

One of 219 original ISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official (ISC)² exam blueprint

This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.