Isaca Exam CISM Topic 4 Question 90 Discussion

Actual exam question for Isaca's CISM exam

Question #: 90
Topic #: 4

[All CISM Questions]

An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization's CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?

ATemporarily suspend wire transfers for the organization.

BProvide awareness training to the CEO for this type of phishing attack.

CProvide awareness training to staff responsible for wire transfers.

DDisable emails for staff responsible for wire transfers.

Show Suggested Answer

Suggested Answer: C

by Desmond at Dec 06, 2024, 12:12 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vicki

6 months ago

Ha! Disabling emails for the wire transfer team? That's like asking them to do their job with one hand tied behind their back. C) is definitely the way to go.

upvoted 0 times

Audrie

5 months ago

B) Provide awareness training to the CEO for this type of phishing attack.

upvoted 0 times

...

Cristina

5 months ago

A) Temporarily suspend wire transfers for the organization.

upvoted 0 times

...

Olive

5 months ago

C) Provide awareness training to staff responsible for wire transfers.

upvoted 0 times

...

Titus

6 months ago

I'm with Yolande on this one. C) is the most comprehensive and sustainable solution. Gotta love those phishing scams, always keeping us on our toes!

upvoted 0 times

...

Caprice

6 months ago

I see your point, Mitsue, but long-term prevention through education is key to mitigating risks.

upvoted 0 times

...

Stefan

6 months ago

B) is not a bad idea, but the CEO isn't the one responsible for the wire transfers. Focusing the training on the relevant staff members is the smart move here.

upvoted 0 times

Antonette

5 months ago

A) Temporarily suspend wire transfers for the organization.

upvoted 0 times

...

Kristin

5 months ago

C) Provide awareness training to staff responsible for wire transfers.

upvoted 0 times

...

Vincent

6 months ago

I think C) is the way to go. Educating the staff on phishing tactics is the most effective long-term solution. Disabling emails might work, but it's like putting a Band-Aid on a bullet wound.

upvoted 0 times

...

Yolande

6 months ago

C) Provides the best solution by addressing the root cause of the problem - the lack of awareness among the staff responsible for wire transfers. Suspending wire transfers or disabling emails are temporary fixes that don't address the underlying issue.

upvoted 0 times