Câu 287: Isaca Certified Information Security Manager

Which of the following is the MOST important consideration when reporting the effectiveness of an information security program to key business stakeholders?

1. A. Linking security metrics to the business impact analysis (BIA)
2. B. Demonstrating a decrease in information security incidents
3. C. Demonstrating cost savings of each control
4. D. Linking security metrics to business objectives — đáp án hiện tại