After a data protection strategy has been created, what should happen NEXT?
Practise this CISM Security Mgr Practice 202 question free, then download the PDF, watch the video walkthrough, or unlock timed mock exams for the full web bank.
✓ Correct answer: C. Executive approvalAnswer: Executive approval A data protection strategy should be reviewed and approved by the executive team before it can be put into action. A vulnerability assessment is needed prior to creating a protection strategy; once developed, a strategy should be executed following proper approval. Monitoring compliance happens after the strategy has been implemented. Internal audits can be carried out at any stage, but they typically follow the approval process.
Keep practising. Use the free CISM Security Mgr Practice 202 PDF, watch the YouTube walkthrough, or unlock all 10 web questions with timed mock exams.
Free practice here. Timed mocks when you are ready.
Study the CISM Security Mgr Practice 202 free question explanations, download the PDF, then unlock timed mock exams on the web when you want exam-day practice.
Theory