CISM: Certified Information Security ManagerDemo

Question

Which of the following should serve as the PRIMARY basis for determining information security objectives?

A Business strategy
B Regulatory requirements
C Information security strategy
D Data classification

Explanation

Information security objectives must align with and support the organization’s business strategy, ensuring that security investments and priorities enable business goals. Regulatory requirements, the information security strategy, and data classification are important inputs, but they are subordinate to the business context.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ242

Community Discussion