CISM Certified Information Security Manager – Question0099

When developing an information security program, what is the MOST useful source of information for determining available resources?

A.
Proficiency test
B. Job descriptions
C. Organization chart
D. Skills inventory

Correct Answer: D

Explanation:

Explanation:
A skills inventory would help identify- the available resources, any gaps and the training requirements for developing resources. Proficiency testing is useful but only with regard to specific technical skills. Job descriptions would not be as useful since they may be out of date or not sufficiently detailed. An organization chart would not provide the details necessary to determine the resources required for this activity.