When supporting a large corporation's board of directors in the development of governance, which of the following is the PRIMARY function of the information security manager?

The correct answer is A. Providing advice and guidance. The primary function of an information security manager in governance development is to advise and guide the board on security risks, best practices, and regulatory compliance. The board relies on this expertise to align security strategy with business objectives, ensuring…

Submitted by daniela_cl· Apr 18, 2026Information Security Governance

Question

When supporting a large corporation’s board of directors in the development of governance, which of the following is the PRIMARY function of the information security manager?

Options

AProviding advice and guidance.
BDeveloping a metrics dashboard.
CPreparing the security budget.
DReporting on current threats and exposures.

How the community answered

(37 responses)

A
84% (31)
B
8% (3)
C
3% (1)
D
5% (2)

Explanation

The primary function of an information security manager in governance development is to advise and guide the board on security risks, best practices, and regulatory compliance. The board relies on this expertise to align security strategy with business objectives, ensuring effective risk management and decision-making. While reporting threats and preparing budgets are important, they are secondary to providing strategic advice on governance.

Topics

#Information Security Governance#Board of Directors#ISM Role#Strategic Advisory

Community Discussion

No community discussion yet for this question.

Full CISM Practice