Certified Information Systems Auditor (CISA) — Question 1034

Which of the following is an executive management concern that could be addressed by the implementation of a security metrics dashboard?

Answer options

• A. Effectiveness of the security program
• B. Total number of false positives
• C. Total number of hours budgeted to security
• D. Security incidents vs. industry benchmarks

Correct answer: A

Explanation

The effectiveness of the security program is a critical concern for executive management, as it directly impacts the organization’s risk management and resource allocation. While the other options provide valuable data, they are more operational metrics rather than strategic concerns that executives typically focus on.