CISA Certified Information Systems Auditor – Question0604

Which of the following is MOST important to the successful implementation of an information security governance framework across the organization?

A.
The existing organizational security culture
B. Security management processes aligned with security objectives
C. Organizational security controls deployed in line with regulations
D. Security policies that adhere to industry best practices

Correct Answer: B