Certified Information Security Manager (CISM) — Question 1031

Which of the following is the BEST indicator of the performance of a security program?

Answer options

• A. Changes in return on investments (ROIs)
• B. Changes in the maturity level
• C. Changes in budget allocation
• D. Changes in security training attendance

Correct answer: B

Explanation

The maturity level reflects the overall effectiveness and sophistication of a security program, making it the best indicator of performance. Changes in ROI, budget allocation, and training attendance can provide insights but do not directly measure the program's capability or effectiveness.