Certified Information Security Manager (CISM) — Question 681

Which of the following BEST demonstrates the added value of an information security program?

Answer options

• A. Security baselines
• B. A gap analysis
• C. A SWOT analysis
• D. A balanced scorecard

Correct answer: D

Explanation

A balanced scorecard is a strategic planning tool that aligns business activities to the vision and strategy of the organization, enhancing the performance measurement of the information security program. The other options, while useful, focus more on specific aspects of security management rather than providing a comprehensive view of the overall value and effectiveness of the security program.