Certified Information Security Manager (CISM) — Question 634

The MOST important attribute of a security control is that it is:

Answer options

• A. auditable
• B. measurable
• C. scalable
• D. reliable

Correct answer: D

Explanation

The most critical attribute of a security control is that it must be reliable, ensuring consistent protection against threats. While being auditable, measurable, and scalable are also important, they do not guarantee the effectiveness of the control in maintaining security under various conditions.