Câu 71: Isaca Certified Information Security Manager

The chief information security officer (CISO) has developed an information security strategy, but is struggling to obtain senior management commitment for funds to implement the strategy. Which of the following is the MOST likely reason?

1. A. The strategy does not include a cost-benefit analysis.
2. B. There was a lack of engagement with the business during development. — đáp án hiện tại
3. C. The strategy does not comply with security standards.
4. D. The CISO reports to the CIO.