Certified Information Security Manager (CISM) — Question 980

Which of the following is the MOST effective way to demonstrate improvement in security performance?

Answer options

• A. Report the results of a security control self-assessment (CSA).
• B. Present trends in a validated metrics dashboard.
• C. Provide a summary of security project return on investments (ROIs).
• D. Present vulnerability testing results.

Correct answer: B

Explanation

The correct answer is B because a validated metrics dashboard provides clear, visual trends that effectively communicate improvements over time. While the other options may provide valuable information, they do not offer the same level of insight into ongoing performance and trends as a metrics dashboard does.