CISM: Certified Information Security ManagerDemo

Question

Measuring which of the following is the MOST accurate way to determine whether an information security strategy aligns with organizational goals?

A Number of blocked intrusion attempts
B Number of business cases reviewed by senior management
C Trends in the number of identified threats to the business
D Percentage of controls integrated into business processes

Explanation

The percentage of controls integrated into business processes directly indicates whether information security is incorporated into how the organization operates to support its business objectives. Counts of blocked attacks, reviewed business cases, or identified threats measure security activity, governance activity, or risk conditions rather than strategic alignment.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ919

Community Discussion