CISM: Certified Information Security ManagerDemo

Question

Which of the following should be the PRIMARY result of an information security program?

A Threat reduction
B Strategic alignment
C Risk elimination
D Cost reduction

Explanation

An information security program should align security governance, controls, and investments with organizational strategy and business objectives. It manages risk to an acceptable level rather than eliminating all risk; reducing threats or costs may be secondary benefits.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ796

Community Discussion