CISM: Certified Information Security ManagerDemo

Question

Which of the following is the MOST important consideration when communicating the effectiveness of an information security program to key business stakeholders?

A Linking security metrics to the business impact analysis (BIA)
B Demonstrating a decrease in information security incidents
C Demonstrating cost savings of each control
D Linking security metrics to business objectives

Explanation

Information security program metrics should be aligned with business objectives so stakeholders can evaluate whether security activities support organizational goals, priorities, and risk management.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ331

Community Discussion