Question

Which of the following is the BEST way to align security and business strategies?

A. Include security risk as part of corporate risk management.

B. Develop a balanced scorecard for security.

C. Establish key performance indicators (KPIs) for business through security processes.

D. Integrate information security governance into corporate governance.

Correct Answer: C????? or D????? or B??????????

______________________

Note

■ Some websites claim that the correct answer is C ("Establish key performance indicators (KPIs) for business through security processes"). Ultimately how?

■ One correct answer is for me the "D", ("Integrate information security governance into corporate governance.") even if it is a little too generic

■ The other one is "B", ("Develop a balanced scorecard for security") perhaps is better

■ What do you think about this?

Answer 1

Please Upvote, if you are impressed with the answer.

If you have any doubt, you can comment.

Answer:

option D is the answer -  Integrate information security governance into corporate governance.

Explanation:

In my opinion Integrating infornation security into corporate governance is the absolute answer. This is because all the business strategies are connected with corporate governance, if we integrate security into corporate governace it would be a hybrid combination to align security and business strategies,