CISM · Question #801
The BEST way to integrate information security governance with corporate governance is to ensure:
The correct answer is B. management teams embed information security into business processes.. The best way to integrate information security governance with corporate governance is for management teams to embed information security into business processes. The CISM Review Manual explains that aligning security objectives and activities with organizational goals and busine
Question
The BEST way to integrate information security governance with corporate governance is to ensure:
Options
- Athe information security steering committee monitors compliance with security policies.
- Bmanagement teams embed information security into business processes.
- Cawareness programs include industry best practice for information security governance.
- Dthe information security program is included in regular external audits.
How the community answered
(35 responses)- A9% (3)
- B69% (24)
- C17% (6)
- D6% (2)
Explanation
The best way to integrate information security governance with corporate governance is for management teams to embed information security into business processes. The CISM Review Manual explains that aligning security objectives and activities with organizational goals and business processes ensures that security is a core part of business operations and strategy, not an isolated activity.
Topics
Community Discussion
No community discussion yet for this question.