CISM Question 73

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D5

  The balanced scorecard (BSC) is a management tool that is used to measure the performance and effectiveness of an organization. The balanced scorecard is used to determine how well an organization can fulfill its mission and strategic objectives and how well it is aligned with overall organizational objectives.

• 1

  D. The Balanced Scorecard is a strategic performance management framework that measures and manages an organization's performance from multiple perspectives, including financial, customer, internal processes, and learning and growth. In the context of information security, it allows organizations to assess the effectiveness of their security measures and how well they align with the broader business objectives.

• 1

  While the other options (SWOT analysis, industry benchmarks, and cost-benefit analysis) can provide valuable insights, the Balanced Scorecard is a comprehensive framework that covers a broader range of factors and perspectives. It allows organizations to assess not only the financial aspects of security but also how it aligns with customer satisfaction, internal processes, and organizational growth, making it the most relevant choice for evaluating the overall effectiveness of an information security program and underlying business processes.