Certified Information Security Manager (CISM) — Question 759

Which of the following events would MOST likely require a revision to the information security program?

Answer options

• A. A change in IT management
• B. A merger with another organization
• C. A significant increase in reported incidents
• D. An increase in industry threat level

Correct answer: B

Explanation

A merger with another organization often leads to the integration of different systems, policies, and cultures, making it essential to revise the information security program to address new risks and ensure compliance. While other options may necessitate updates, they do not typically require as comprehensive a revision as a merger, which fundamentally changes the operational landscape.