Which of the following is MOST important to ensure ongoing senior management commitment to an organization's information security strategy?

The correct answer is B. Effective and reliable security reporting. Ongoing commitment requires ongoing visibility. Effective and reliable security reporting keeps senior management informed about the current risk posture, the value of security investments, trends, and emerging threats - in terms they can relate to business impact. Without…

Submitted by wei.xz· Apr 18, 2026Information Security Governance

Question

Options

AA well-defined information security control framework
BEffective and reliable security reporting
CStrategic alignment to an industry framework
DA detailed and documented business impact analysis (BIA)

How the community answered

(26 responses)

A
4% (1)
B
81% (21)
C
4% (1)
D
12% (3)

Explanation

Ongoing commitment requires ongoing visibility. Effective and reliable security reporting keeps senior management informed about the current risk posture, the value of security investments, trends, and emerging threats - in terms they can relate to business impact. Without consistent reporting, executives lose visibility and interest wanes. A control framework (A) is a delivery mechanism, not a communication tool. Industry framework alignment (C) provides structure but does not engage management. A BIA (D) is a one-time or periodic planning artifact. Regular, meaningful reporting is what sustains engagement and commitment over time.

Topics

#Senior management commitment#Security reporting#Information security governance#Strategy sustainment

Community Discussion

No community discussion yet for this question.

Full CISM Practice