How does an organization PRIMARILY benefit from the creation of an information security steering committee?

Question

Options

• AAn increase in information security risk awareness
• BAn increased focus on information security resource management
• CAn increased alignment with industry security trends that impact the business
• DAn increased alignment of information security with the business

• A
  2% (1)
• B
  7% (3)
• C
  2% (1)
• D
  88% (36)

Explanation

An information security steering committee brings together senior business and IT/security leaders to jointly govern security strategy. Its primary purpose is to ensure security investments, priorities, and controls align with and support business objectives - bridging the gap between security practitioners and business decision-makers. Risk awareness (A) is a secondary outcome. Resource management (B) may be discussed but is not the committee's defining benefit. Industry trend awareness (C) is an input to strategy discussions, not the primary benefit. Alignment of security with the business (D) is the core governance function that justifies forming the committee in the first place, ensuring security is a business enabler rather than a siloed technical function.

No community discussion yet for this question.