Which of the following is the PRIMARY reason to present a business case for an information security initiative to senior management?

The correct answer is C. To demonstrate alignment with organizational strategy. The primary reason for presenting a business case for an information security initiative to senior management is to show how it aligns with the organization's strategic objectives. This helps justify the investment by demonstrating how the initiative supports business goals…

Submitted by renata2k· Apr 18, 2026Information Security Governance

Question

Options

ATo aid management in the decision-making process for purchasing the solution
BTo provide management with the status of the information security program
CTo demonstrate alignment with organizational strategy
DTo present risk treatment options to senior management

How the community answered

(37 responses)

A
8% (3)
B
14% (5)
C
76% (28)
D
3% (1)

Explanation

The primary reason for presenting a business case for an information security initiative to senior management is to show how it aligns with the organization's strategic objectives. This helps justify the investment by demonstrating how the initiative supports business goals, reduces risk, ensures compliance, and enhances operational resilience. While decision-making, status updates, and risk treatment discussions are important, they are secondary to ensuring alignment with business strategy, which is key to securing management support.

Topics

#Business Case#Strategic Alignment#Senior Management Buy-in#Information Security Governance

Community Discussion

No community discussion yet for this question.

Full CISM Practice