CISM Certified Information Security Manager – Question1226

Using which of the following metrics will BEST help to determine the resiliency of IT infrastructure security controls?

A.
Number of successful disaster recovery tests
B. Percentage of outstanding high-risk audit issues
C. Frequency of updates to system software
D. Number of incidents resulting in disruptions

Correct Answer: D