Which of the following should have the MOST influence on the development of information security policies?

The correct answer is C. Business strategy. Business strategy should have the most influence, as information security policies must align with and support the organization’s overall goals, priorities, and risk tolerance to be effective and

Submitted by fatema_kw· Apr 18, 2026Information Security Governance

Question

Options

AIT security framework
BPast and current threats
CBusiness strategy
DCompliance with industry standards

How the community answered

(36 responses)

A
8% (3)
B
36% (13)
C
42% (15)
D
14% (5)

Explanation

Business strategy should have the most influence, as information security policies must align with and support the organization’s overall goals, priorities, and risk tolerance to be effective and

Topics

#Information Security Policies#Business Alignment#Security Governance#Strategic Planning

Community Discussion

No community discussion yet for this question.

Full CISM Practice