CISM: Certified Information Security ManagerDemo

Question

Which of the following would BEST facilitate integrating information security governance into enterprise governance?

A Implementing an information security awareness program
B Documenting the information security governance framework
C Developing an information security policy based on risk assessments
D Establishing an information security steering committee

Explanation

An information security steering committee provides cross-functional executive oversight, aligns security priorities and decisions with business objectives, and establishes accountability between information security and enterprise governance.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ724

Community Discussion