According to the IGTI,Boards of directors should supervise strategic information security objectives by all but which of the following?
A) Inculcating a culture that recognizes the criticality of information and information security to the organization
B) Verifying that management's investment in information security is properly aligned with organizational budgets and the organization's financial environment
C) Assuring that a comprehensive information security program is developed and implemented
D) Demanding reports from the various layers of management on the information security program's effectiveness and adequacy

Question

Quizplus · Accepted Answer

The statement "Boards of directors should supervise strategic information security objectives by verifying that management's investment in information security is properly aligned with organizational budgets and the organization's financial environment" is incorrect. Instead, the board of directors should ensure that management's investment in information security is aligned with the organization's overall strategic objectives and risk management approach, rather than just financial considerations.

According to the IGTI,Boards of Directors Should Supervise Strategic Information