Certified Chief Information Security Officer (CCISO) — Question 1

When briefing senior management on the creation of a governance process, the MOST important aspect should be:

Answer options

• A. knowledge required to analyze each issue
• B. information security metrics
• C. linkage to business area objectives
• D. baseline against which metrics are evaluated

Correct answer: C

Explanation

The correct answer is C, as aligning the governance process with business objectives ensures that it supports the overall goals of the organization. While the other options, such as metrics and analysis, are important, they are secondary to ensuring that the governance process is relevant to the business's strategic direction.