Certified Information Security Manager (CISM) — Question 352

What is the PRIMARY benefit to an organization when information security program requirements are aligned with employment and staffing processes?

Answer options

• A. Access is granted based on task requirements.
• B. Information assets are classified appropriately.
• C. Security staff turnover is reduced.
• D. Security incident reporting procedures are followed.

Correct answer: A

Explanation

The primary benefit is that access is granted based on task requirements, ensuring that only authorized personnel have access to sensitive information. This alignment helps in minimizing security risks. The other options, while important, do not directly relate to the integration of security and staffing processes.