Certified Information Security Manager (CISM) — Question 703

Which of the following is MOST important to the successful management of an information security program?

Answer options

• A. Compliance with regulatory requirements
• B. Adequate security budget
• C. Support from key stakeholders
• D. Continuous controls monitoring

Correct answer: C

Explanation

Support from key stakeholders is vital as it ensures that the security program has the necessary resources and organizational backing to be effective. While compliance, budget, and monitoring are important, they are secondary to the commitment and engagement of stakeholders who can drive the program's success.