Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organization's information security policy?

Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organization’s information security policy?

exams CISA V0 CISA exam 0 Comments

Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organization’s information security policy?
A . Alignment with the IT tactical plan
B. IT steering committee minutes
C. Compliance with industry best practice
D. Business objectives

Answer: D