CISM Certified Information Security Manager – Question0164

Which of the following is MOST helpful in integrating information security governance with corporate governance?

A.
Assigning the implementation of information security governance to the steering committee.
B. Including information security processes within operational and management processes.
C. Providing independent reports of information security efficiency and effectiveness to the board.
D. Aligning the information security governance to a globally accepted framework.

Correct Answer: B