CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ963

Information Security Program

Which of the following is the BEST indicator of a security program’s performance?

  • A Changes in return on investments (ROIs)
  • B Changes in the maturity level
  • C Changes in budget allocation
  • D Changes in security training attendance
Explanation

Changes in security-program maturity best indicate overall performance because maturity measures how consistently and effectively security capabilities, processes, controls, and governance are established and improved over time. Budget, ROI, and training attendance are useful supporting metrics but are not comprehensive measures of program performance.

Community Discussion

No comments yet. Be the first to start the discussion!