Certified Information Security Manager (CISM) — Question 994

Which of the following is the MOST important driver when developing an effective information security strategy?

Answer options

• A. Benchmarking reports
• B. Information security standards
• C. Business requirements
• D. Security audit reports

Correct answer: C

Explanation

Business requirements are crucial because they align the security strategy with the organization's goals and needs. While benchmarking reports, information security standards, and security audit reports provide valuable insights and guidelines, they do not directly ensure that the security measures are tailored to the specific context and objectives of the business.