Which of the following BEST indicates senior management support for an information security program?

The correct answer is D. Key performance indicators (KPIs) are defined for the information security program. Senior management support is best indicated by establishing and tracking KPIs, because it reflects executive-level sponsorship for measuring program performance, setting expectations, and holding the organization accountable for security outcomes.

Submitted by wei.xz· Apr 18, 2026Information Security Governance

Question

Options

ARisk assessments are conducted frequently by the information security team.
BThe information security manager establishes a relationship with business line managers.
CDetailed information security procedures are documented and communicated.
DKey performance indicators (KPIs) are defined for the information security program.

How the community answered

(41 responses)

A
7% (3)
B
17% (7)
C
5% (2)
D
71% (29)

Explanation

Senior management support is best indicated by establishing and tracking KPIs, because it reflects executive-level sponsorship for measuring program performance, setting expectations, and holding the organization accountable for security outcomes.

Topics

#Senior Management Support#Information Security Governance#KPIs#Program Effectiveness

Community Discussion

No community discussion yet for this question.

Full CISM Practice