An information security manager is concerned that executive management does not su the following is the BEST way to address this situation?

An information security manager is concerned that executive management does not su the following is the BEST way to address this situation?
A . Revise the information security strategy to meet executive management expectations.
B . Escalate noncompliance concerns to the internal audit manager
C . Report the risk and status of the information security program to the board.
D . Demonstrate alignment of the information security function with business needs.

View Answer

Answer: D