An information security program is BEST positioned for success when is closely aligned with:

The correct answer is C. the information security strategy. The information security program is the operational implementation layer that executes the direction set by the information security strategy. Aligning the program to the strategy ensures that all security activities support the organization's defined security goals and, by…

Submitted by javi_es· Apr 18, 2026Information Security Program Development and Management

Question

Options

Arecognized industry frameworks.
Binformation security best practices.
Cthe information security strategy.
DIT risk management framework.

How the community answered

(17 responses)

A
6% (1)
C
88% (15)
D
6% (1)

Explanation

The information security program is the operational implementation layer that executes the direction set by the information security strategy. Aligning the program to the strategy ensures that all security activities support the organization's defined security goals and, by extension, its business objectives. Industry frameworks and best practices are valuable inputs that inform the strategy, not the program directly. An IT risk management framework is a component that feeds into the strategy. The program must be driven by the strategy to remain purposeful, prioritized, and measurable against the right outcomes.

Topics

#Information Security Program#Strategic Alignment#Program Success#Governance Principles

Community Discussion

No community discussion yet for this question.

Full CISM Practice