Security and Risk Management
Question #100
Which of the following best describes an Information Security Management System (ISMS)?
A. A NIST Framework for managing personal data to ensure business continuity.
B. A systematic and structured approach for managing an organization's sensitive data to minimize risk and ensure business continuity.
C. An ISO Framework specifically designed to protect a company's PII.
D. A set of procedures and guidelines focused solely on ensuring high availability.
Domain Concept: Security and Risk Management
This scenario evaluates management-level decision making in Security and Risk Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.