CISM Certified Information Security Manager – Question0256 - CISM Certified Information Security Manager

Which of the following types of information would the information security manager expect to have the LOWEST level of security protection in a large, multinational enterprise?

A. Strategic business plan
B. Upcoming financial results
C. Customer personal information
D. Previous financial results

Correct Answer: D

Explanation:

Explanation: Previous financial results are public; all of the other choices are private information and should only be accessed by authorized entities.