Which of the following is MOST important in order to obtain senior leadership support when presenting an information security strategy?

The correct answer is A. The strategy aligns with management's acceptable level of risk. Aligning the information security strategy with management's acceptable level of risk is most important to gain senior leadership support. This ensures the strategy is relevant to the organization's goals, risk appetite, and priorities, making it more likely to receive buy-in…

Submitted by certguy· Apr 18, 2026Information Security Governance

Question

Options

AThe strategy aligns with management's acceptable level of risk.
BThe strategy aligns with industry benchmarks and standards.
CThe strategy addresses ineffective information security controls.
DThe strategy addresses organizational maturity and the threat environment.

How the community answered

(22 responses)

A
82% (18)
B
5% (1)
C
9% (2)
D
5% (1)

Explanation

Aligning the information security strategy with management's acceptable level of risk is most important to gain senior leadership support. This ensures the strategy is relevant to the organization's goals, risk appetite, and priorities, making it more likely to receive buy-in and necessary resources.

Topics

#Senior leadership support#Risk appetite#Information security strategy#Governance alignment

Community Discussion

No community discussion yet for this question.

Full CISM Practice