Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Steering committee does not approve strategy
A. Steer-Co DOESNT Review and DOESNT approve strategies. They implement/monitor the strategy. CISA materials explain this better.
The correct answer is B. The security strategy is reviewed and approved by the organization's steering committee. Explanation: Among the options provided, having the security strategy reviewed and approved by the organization's steering committee would best help to ensure that the security program is aligned with business objectives. The steering committee typically consists of high-level executives and stakeholders who represent various areas of the organization. A. The organization's board of directors includes a dedicated information security advisor: While having an information security advisor on the board is important, the steering committee is more directly involved in operational decision-making and strategy alignment